GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Ejecución de Código Arbitrario a través de ZScript Malicioso Una prueba de concepto para una vulnerabilidad de ejecución de código arbitrario que encontré en la funcionalidad ZScript de GZDoom https://github.com/zdoom/gzdoom. Un atacante puede compartir un archivo PK3 que contenga...

EUVD-2025-4457

Malicious code in bioql PyPI...

CVE-2024-54756

A remote code execution RCE vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a crafted PK3 file containing a malicious ZScript source file...

CVE-2024-54756

CVE-2024-54756 affects GZDoom v4.13.1 (ZDoom Team GZDoom). The vulnerability stems from the ZScript function parsing in PK3/WAD files, enabling remote code execution when a crafted PK3 containing malicious ZScript is loaded. Public writeups describe an exploit chain in ZScript involving an oversi...

CVE-2024-54756

A remote code execution RCE vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a crafted PK3 file containing a malicious ZScript source file...

CVE-2024-54756

A remote code execution RCE vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a crafted PK3 file containing a malicious ZScript source file...

SUSE CVE-2006-2082

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...