Malicious code in @malware-test-dutch-nappa-borak-chess/test-mlw3-dutch-nappa-borak-chess (npm)

The package @malware-test-dutch-nappa-borak-chess/test-mlw3-dutch-nappa-borak-chess was found to contain malicious code...

Malicious code in toledo-chess (npm)

The package toledo-chess was found to contain malicious code...

MAL-2025-37017 Malicious code in toledo-chess (npm)

The package toledo-chess was found to contain malicious code...

MAL-2025-8617 Malicious code in @malware-test-dutch-nappa-borak-chess/test-mlw3-dutch-nappa-borak-chess (npm)

The package @malware-test-dutch-nappa-borak-chess/test-mlw3-dutch-nappa-borak-chess was found to contain malicious code...

CVE-2023-22959

WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php txtFirstName, txtLastName...

CVE-2006-5044

Unspecified vulnerability in Prince Clan Princeclan Chess component compcchess 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors...

Ubuntu: Security Advisory (USN-7336-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : GNU Chess vulnerability (USN-7336-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7336-1 advisory. Michael Vaughan discovered an overflow vulnerability in GNU Chess that occurs when reading a specially crafted Portable Game Notation PGN file...

USN-7336-1 gnuchess vulnerability

Michael Vaughan discovered an overflow vulnerability in GNU Chess that occurs when reading a specially crafted Portable Game Notation PGN file. An attacker could possibly use this issue to cause GNU Chess to crash, resulting in a denial of service, or the execution of arbitrary code...

USN-7336-1: GNU Chess vulnerability

Michael Vaughan discovered an overflow vulnerability in GNU Chess that occurs when reading a specially crafted Portable Game Notation PGN file. An attacker could possibly use this issue to cause GNU Chess to crash, resulting in a denial of service, or the execution of arbitrary code...

More Research Showing AI Breaking the Rules

These researchers had LLMs play chess against better opponents. When they couldn't win, they sometimes resorted to cheating. Researchers gave the models a seemingly impossible task: to win against Stockfish, which is one of the strongest chess engines in the world and a much better player than an...

PT-2025-5622

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned. Description: A issue exists in chess game setups and user interfaces that can lead to the misidentification of the King and Queen pieces. This issue arises primarily from ambiguous...

CVE-2025-23868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mliebelt Chess Tempo Viewer chesstempoviewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through = 0.9.5...

CVE-2025-23868

CVE-2025-23868 : Stored XSS in Chess Tempo Viewer (Markus Liebelt). Described as Improper Neutralization of Input During Web Page Generation; affects Chess Tempo Viewer versions from n/a through 0.9.5. CVSS v3.1 base score 6.5 (Medium) with NETWORK attack vector, low to moderate complexity, user ...

CVE-2025-23868 WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mliebelt Chess Tempo Viewer chesstempoviewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through = 0.9.5...

CVE-2025-23868 WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mliebelt Chess Tempo Viewer chesstempoviewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through = 0.9.5...

WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Chess Tempo Viewer versions = 0.9.5...

PT-2025-5154 · Markus Liebelt · Markus Liebelt Chess Tempo Viewer

Name of the Vulnerable Software and Affected Versions: Markus Liebelt Chess Tempo Viewer versions 0.9.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can injec...

WordPress plugin Chess Tempo Viewer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

praguechess.cz Cross Site Scripting vulnerability OBB-3899707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...