Open Capture the Flag at DEFCON

Capture the Flag: A DEFCON tradition, the annual Capture the Flag CTF competition pits some of the world’s best teams of hackers against each other in an epic struggle for supremacy and bragging rights. This shot is from the Open CTF tournament – an “all comers welcome” alternative to the officia...

Unreal Tournament Remote Buffer Overflow Exploit (SEH)

Exploit for windows platform in category remote exploits Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616...

Unreal Tournament - Remote Buffer Overflow (SEH)

Unreal Tournament - Remote Buffer Overflow SEH Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all...

Unreal Tournament - Remote Buffer Overflow (SEH)

Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all ut99 servers without a patch. Tested on: win7...

Unreal Tournament Buffer Overflow

Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all ut99 servers without a patch. Tested on: win7...

Unreal Tournament 2004 (Linux) - 'secure' Remote Overflow (Metasploit)

$Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Unreal Tournament 3 2.1 - STEAMBLOB Remote Denial of Service

Unreal Tournament 3 2.1 - STEAMBLOB Remote Denial of Service Original Advisory: http://aluigi.org/adv/ut3steamer-adv.txt Luigi Auriemma Application: Unreal Tournament III http://www.unrealtournament3.com Versions: = 2.1 aka 3809 Platforms: Windows tested and Linux Bug: unitialized pointer...

Unreal Tournament 3 2.1 - 'STEAMBLOB' Remote Denial of Service

Original Advisory: http://aluigi.org/adv/ut3steamer-adv.txt Luigi Auriemma Application: Unreal Tournament III http://www.unrealtournament3.com Versions: = 2.1 aka 3809 Platforms: Windows tested and Linux Bug: unitialized pointer Exploitation: remote, versus server Date: 17 Jul 2010 Author: Luigi...

Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

Sql injection

SQL injection vulnerability in the HotBrackets Tournament Brackets comhotbrackets component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-0945

CVE-2010-0945 concerns a SQL injection vulnerability in the Joomla! extension component com_hotbrackets (HotBrackets Tournament Brackets). The public description states that remote attackers can abuse the id parameter to index.php to execute arbitrary SQL commands. Affected product is Joomla! wit...

CVE-2010-0945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the HotBrackets Tournament Brackets comhotbrackets component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-7015

The CVE-2008-7015 entry affects Unreal Engine 3 bindings used by games such as Unreal Tournament 3 (1.3) and Frontlines: Fuel of War (1.1.1). The issue arises when a remote attacker sends a packet with a large length value, triggering a memory allocation failure that can cause the server to exit ...

CVE-2008-7015: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service server exit via a packet with a large length value that triggers a memory allocation failure...

CVE-2008-7011: Undefined Security Weakness

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...

CVE-2008-4600

CVE-2008-4600 affects PokerMax Poker League Tournament Script 0.13. The flaw allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie in configure.php. Base CVSS2 score 7.5 (NETWORK, low complexity, no user interaction). No remediation d...

CVE-2008-4600: Undefined Security Weakness

configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie...

CVE-2008-4243

Directory traversal vulnerability in ImageServer aka UTImageServer in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 UT3 1.3 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Directory traversal

Directory traversal vulnerability in ImageServer aka UTImageServer in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 UT3 1.3 allows remote attackers to read arbitrary files via a .. dot dot in the URI...