Tekken Card Tournament (CCG) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Tekken Card Tournament CCG published at the 'play' market has multiple vulnerabilities...

Best Tournament Manager - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Best Tournament Manager published at the 'play' market has multiple vulnerabilities...

CVE-2014-9738

Multiple cross-site scripting XSS vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 account username, a 2 node title, or a 3 team entity title...

CVE-2014-9738

Multiple cross-site scripting XSS vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 account username, a 2 node title, or a 3 team entity title...

CVE-2014-9738: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 account username, a 2 node title, or a 3 team entity title...

SA-CONTRIB-2014-114 - Tournament - Cross Site Scripting

This project allows you to create various types of tournaments as nodes and associated teams, tournaments, and matches. There are several cases in the project where an account username, node title, and team entity title are not correctly filtered before being displayed to a user. It is possible t...

Epic Games Unreal Tournament Server 436.0 Engine Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9840/info A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data...

Epic Games Unreal Engine Logging Function - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25374/info The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to...

Unreal Tournament Remote Buffer Overflow Exploit (SEH)

No description provided by source. Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all ut99 servers...

Unreal Tournament 2004 "secure" Overflow (Win32)

No description provided by source. $Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Unreal Tournament 2004 - "Secure" Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Unreal Tournament 3 2.1 'STEAMBLOB' Command Remote Denial of Service Vulnerability

No description provided by source. Original Advisory: http://aluigi.org/adv/ut3steamer-adv.txt Luigi Auriemma Application: Unreal Tournament III http://www.unrealtournament3.com Versions: = 2.1 aka 3809 Platforms: Windows tested and Linux Bug: unitialized pointer Exploitation: remote, versus serv...

Unreal Tournament 3 1.3 - Remote Directory Traversal Vulnerability

No description provided by source. Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server...

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

漏洞成因： 没有正确处理内存分配异常，导致拒绝服务漏洞 下列使用了该引擎的应用存在漏洞： Unreal Tournament 3.1.3 Unreal Tournament 2003 Unreal Tournament 2004 Dead Man's Hand Pariah WarPath Postal 2 Shadow Ops exp： http://www.securityfocus.com/data/vulnerabilities/exploits/31205.zip 参考： http://www.securityfocus.com/bid/31205/exploit source...

Unreal Tournament 3 - Denial Of Service And Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30430/info Unreal Tournament 3 is prone to multiple remote vulnerabilities, including a denial-of-service issue and a memory-corruption issue. An attacker can exploit these issues to execute arbitrary code within the...

Unreal Tournament 2004 - NULL Pointer Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30427/info Unreal Tournament 2004 is prone to a remote denial-of-service vulnerability because the application fails to handle NULL-pointer exceptions. An attacker could exploit this issue to crash the affected applicatio...

Epic Games Unreal Tournament Server 436.0 DoS Amplifier Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5148/info Unreal Tournament is a game produced by Epic Games, available for Microsoft Windows and Linux. Network play is supported. A vulnerability has been reported in the server used for network play. It is possible to...

Epic Games Unreal Tournament Engine 3 UMOD Manifest.INI Remote Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10196/info Reportedly the Unreal Tournament Engine is affected by a local file overwrite vulnerability due to the UMOD manifest.ini file. This issue is due to an input validation error that allows a malicious user specify...

Put It On the Board

The names that teams choose to represent themselves in the various tournaments at DEFCON say a lot. Here’s a shot of the score board for the Open CTF tournament. My favorite: ADRIAN LMAO, a jab at the now-infamous hacker who is responsible for turning Bradley Manning in to the federal authorities...

Hackers Got "Wired In"

Competition in the CTF contests is intense, with teams of hackers “wired in” as they might say in The Social Network and crowded around tables filled with laptops, cabling, soda, booze and junk food. Age is no obstacle, either, with some of the most skilled and technical hackers unable to legally...