500 matches found
CVE-2012-3546 Apache Tomcat Bypass of security constraints
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2012-3546 Apache Tomcat Bypass of security constraints Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.29 - - Tomcat 6.0.0 to 6.0.35 Earlier unsupported versions may also be affected Descriptio...
tomcat -- bypass of security constraints
The Apache Software Foundation reports: When using FORM authentication it was possible to bypass the security constraint checks in the FORM authenticator by appending "/jsecuritycheck" to the end of the URL if some other component such as the Single-Sign-On valve had called request.setUserPrincip...
Valve Steam Client Detection
Binary data 6617.prm...
Valve Steam multiple security vulnerabilities
Buffer overflows, code executions and game engines vulnerabilities can be exploited via steam:// URI handler...
Valve подтвердила взлом Steam
Компания Valve разослала пользователям своего сервиса Steam письмо, в котором говорится, что причиной недавнего отключения форумов стала хакерская атака. Ранее представители Valve не комментировали эту информацию. Как сообщается в письме, хакеры взломали не только форум сервиса, но также смогли...
Possible Credit Card Theft in Steam Website Hacking
Possible Credit Card Theft in Steam Website Hacking Valve CEO Gabe Newell has contacted all users of the Steam game distribution platform to let them know that the company has suffered a security breach. Right before going offline, users saw a new category in the forum that directed them to open ...
Valve Steam Client Application v1559/1559 Local Privilege Escalation
Exploit for windows platform in category local exploits Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559...
Valve Steam Client Application 15591559 - Local Privilege Escalation
Valve Steam Client Application 15591559 - Local Privilege Escalation Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions...
Valve Steam Client Application v1559/1559 Local Privilege Escalation
Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...
Valve Steam Client Application v1559/1559 Local Privilege Escalation
Summary Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation. It is used to distribute games and related media online, from small independent developers to larger software houses. Steam also has community features,...
Valve Steam Client Application 1559/1559 - Local Privilege Escalation
Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...
Apache Tomcat 6.x < 6.0.9 Information Disclosure
According to its self-reported version number, the instance of Apache Tomcat 6.x listening on the remote host is prior to 6.0.9. It is, therefore, affected by an information disclosure vulnerability. If the remote Apache Tomcat install is configured to use the SingleSignOn Valve, the JSESSIONIDSS...
Apache Tomcat 4.x < 4.1.39 Multiple Vulnerabilities
According to its self-reported version number, the instance of Apache Tomcat 4.x listening on the remote host is prior to 4.1.39. It is, therefore, affected by one or more of the following vulnerabilities : - If the remote Apache Tomcat install is configured to use the SingleSignOn Valve, the...
Design/Logic Flaw
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
CVE-2008-7203
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
CVE-2008-7203
CVE-2008-7203 affects Valve Software’s Half-Life/Counter-Strike 1.6. The vulnerability allows remote attackers to cause a denial of service (crash) by sending multiple crafted login packets over the network. The description indicates the issue is triggered by crafted login data, but the exact roo...
CVE-2008-7203
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
Valve Software Source Engine - Format String
Valve Software Source Engine - Format String source: https://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attack...
Valve Software Source Engine - Format String
source: https://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may exploit this issue to execute arbitrar...
[Full-disclosure] STEAM (Valve) - Phishing and Cross-site Scripting in internal browser
=========================================== = APP: STEAM - Valve Software = =========================================== - STEAM http://www.steampowered.com - Valve Software http://www.valvesoftware.com - Vulnerability Discovery: Gabriel Lima gabriel at falandodeseguranca.com -...