GHSA-8CWQ-4CMF-PX73 PocketMine-MP invalid skin geometry JSON data leading to server crash

Impact pocketmine\entity\Skin doesn't correctly handle errors produced by adhocore/json-comment, which throws RuntimeException rather than returning false as PocketMine-MP expects. This leads to a server crash if the skin geometry data is invalid for some reason e.g. a syntax error. Patches...

PocketMine-MP invalid skin geometry JSON data leading to server crash

Impact pocketmine\entity\Skin doesn't correctly handle errors produced by adhocore/json-comment, which throws RuntimeException rather than returning false as PocketMine-MP expects. This leads to a server crash if the skin geometry data is invalid for some reason e.g. a syntax error. Patches...

PT-2022-28217 · Unknown · Adhocore/Json-Comment +1

Name of the Vulnerable Software and Affected Versions: PocketMine-MP affected versions not specified Description: The issue arises from the pocketmineentitySkin component not handling errors correctly when parsing skin geometry data. Specifically, it expects false to be returned in case of an...

$6 million heist targets video game skin trading site

An incredibly popular digital item trading site has suffered a spectacular loss at the hands of wily attackers. According to Bleeping Computer, CS Money lost out on $6 million via just 20,000 pilfered items. How did this happen, and why are digital items so popular in the first place? The digitiz...

Exploit for SQL Injection in Wordpress

CVE-2022-21661 CVE-2022-216...

Exploit for SQL Injection in Wordpress

CVE-2022-21661 CVE-2022-216...

skin-lasers.fr Cross Site Scripting vulnerability OBB-2694272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in free-fortnite-skin-ineoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd03cda758a8d8c6c0d17bd92248377a93f3862510b55553ad7c3f31f43bd8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3141 Malicious code in free-fortnite-skin-epmn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d8b60e797d4e7ae5da705d08b5f1b12156bac1ef321c874941cb30f95fa3922 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-free-fortnite-skin-usa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664743cef9156cbb054e76c53020e3f718dd6138cbcf7aa5b994614ea11da1c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-skin-indie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44c1a40b6076c4728561543d1eaf3e3fed3fc1b74a1007801c9b89db0403173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3142 Malicious code in free-fortnite-skin-indie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44c1a40b6076c4728561543d1eaf3e3fed3fc1b74a1007801c9b89db0403173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3350 Malicious code in get-free-fortnite-skin-usa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664743cef9156cbb054e76c53020e3f718dd6138cbcf7aa5b994614ea11da1c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3143 Malicious code in free-fortnite-skin-ineoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd03cda758a8d8c6c0d17bd92248377a93f3862510b55553ad7c3f31f43bd8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3115 Malicious code in fortnite-skin-2022-free-fortnite-skins-genertor-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 518d446bb2a75188ae1f93ce50f2c6725588e75e71f2caa075e6e75ccd405f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fortnite-skin-redeem-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf4b2a0f4628749514ab73735f2161f8534552e1a684eae921fc8b2858b09d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3116 Malicious code in fortnite-skin-legit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e141232e079e0063beca04d3a7f2badcb1e36fbd7c8d41daa85d5b351d7d0ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fortnite-skin-legit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e141232e079e0063beca04d3a7f2badcb1e36fbd7c8d41daa85d5b351d7d0ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3172 Malicious code in free-fortnite-wildcat-skin-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d0de62fd6004538e6baff898b13439f919fa85f3f53373ec656039edd235007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3275 Malicious code in garena-free-fire-skin-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e64e908d121975afc34aaa1c3c5b79e15f425dbee52d585048d26e2a926ca3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...