19 matches found
The Mystery of Chernobyl’s Post-Invasion Radiation Spikes
Soon after Russian troops invaded Ukraine in February 2022, sensors in the Chernobyl Exclusion Zone reported radiation spikes. A researcher now believes he’s found evidence the data was manipulated...
chernobyl.site123.me Cross Site Scripting vulnerability OBB-1477740
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
A week in security (June 17 – 23)
Last week on the Malwarebytes Labs blog, we took a look at the growing pains of smart cities, took a deep dive into AI, jammed along to Radiohead, and looked at the lessons learned from Chernobyl in relation to critical infrastructure. We also explored a new Steam phish attack, and pulled apart a...
Chernobyl’s lessons for critical-infrastructure cybersecurity
This story originally ran on The Parallax on April 26, 2019. CHERNOBYL EXCLUSION ZONE, Ukraine—The stray dog looking directly at me was hard to resist. Her ears perked up, her fur appeared clean—free of mange, at any rate—and she held a large stick firmly between her jaws. She looked like a good...
Ukrainian Man Arrested, Charged in NotPetya Distribution
The Cyber Police of Ukraine arrested a suspect they allege distributed the destructive NotPetya/ExPetr malware resulting in the infection of 400 computers. NotPetya/ExPetr was the malware behind a massive global cyberattack that took place earlier this year. It infected computers worldwide with...
Complex Petya-Like Ransomware Outbreak Worse than WannaCry
Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. The attackers behind today’s global ransomware outbreak are spreading the malware using a modified version of the leaked...
S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29997/info S.T.A.L.K.E.R is prone to multiple remote vulnerabilities: - A stack-based buffer-overflow vulnerability - An integer-overflow vulnerability - A denial-of-service vulnerability An attacker can exploit these...
Integer overflow
Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...
CVE-2008-6702
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...
CVE-2008-6704
Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...
CVE-2008-6705
The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...
Code injection
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...
CVE-2008-6702
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...
CVE-2008-6705
The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...
CVE-2008-6704
The CVE-2008-6704 entry concerns an integer overflow in the NET_Compressor::Decompress function of S.T.A.L.K.E.R.: Shadow of Chernobyl (versions 1.0006 and earlier). A remote attacker can trigger a denial of service (server crash) by sending a crafted packet with a 0xC1 value that contains no com...
CVE-2008-6704
Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...
Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006
Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...
S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/29997/info S.T.A.L.K.E.R is prone to multiple remote vulnerabilities: - A stack-based buffer-overflow vulnerability - An integer-overflow vulnerability - A denial-of-service vulnerability An attacker can exploit these issues to execute arbitrary code with...
Denial of Service in S.T.A.L.K.E.R. 1.0006
Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 15 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...