144 matches found
final-fantasy.ch Cross Site Scripting vulnerability OBB-1242939
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
[SECURITY] Fedora 28 Update: wesnoth-1.14.4-1.fc28
The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...
[SECURITY] Fedora 27 Update: wesnoth-1.14.4-1.fc27
The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...
fantasydrive.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-650837 Description| Value ---|--- Affected Website:| fantasydrive.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fantasy--life2.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-648857 Description| Value ---|--- Affected Website:| fantasy--life2.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fantasy-life2.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-645511 Description| Value ---|--- Affected Website:| fantasy-life2.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
finalfantasy-pictlogica.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-645121 Description| Value ---|--- Affected Website:| finalfantasy-pictlogica.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
fantasyfootball.telegraph.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-631924 Description| Value ---|--- Affected Website:| fantasyfootball.telegraph.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Square Enix Final Fantasy XIV for Windows Man-in-the-Middle Attack Vulnerability
Square Enix Final Fantasy XIV for Windows is a Japanese role-playing game based on the Windwos platform by Square Enix. Square Enix's Final Fantasy XIV for Windows is a role-playing game based on the Windwos platform. A security vulnerability exists in the ffxivlauncher.exe file in versions 4.21...
Design/Logic Flaw
ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http befor...
CVE-2018-7295
ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http befor...
CVE-2018-7295
ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http befor...
CVE-2018-7295
The CVE affects ffxivlauncher.exe in Square Enix Final Fantasy XIV for Windows (versions 4.21 and 4.25). Root cause: Improper enforcement of message integrity during transmission in a communication channel, where a session retrieves global.js via http before proceeding to use https. This enables ...
CVE-2018-7295: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http befor...
PT-2018-18004
Name of the Vulnerable Software and Affected Versions Square Enix Final Fantasy XIV versions 4.21 through 4.25 Description The issue arises from improper enforcement of message integrity during transmission in a communication channel. This allows a man-in-the-middle attacker to steal user...
DDoS attacks in Q1 2018
News overview In early January, it was reported that an amateur hacker had come close to pulling off a botnet attack using "improvised" materials. Armed with information gleaned from hacker forums, the DIYer created a Trojan using a zero-day exploit in Huawei routers and released it online. The...
fantasy-of-dreams.de XSS vulnerability
Open Bug Bounty ID: OBB-596434 Description| Value ---|--- Affected Website:| fantasy-of-dreams.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Hackers crack Final Fantasy XV Windows edition before its launch
By Uzair Amir For gaming fans, the release of Final Fantasy XV for This is a post from HackRead.com Read the original post: Hackers crack Final Fantasy XV Windows edition before its launch...
Blizzard Entertainment Hit With Weekend DDoS Attack
Blizzard Entertainment reported a crippling DDoS attack over the weekend creating chronic latency and connection issues for players of games Overwatch, World of Warcraft and others. The DDoS attack has since subsided, according to Blizzard, but users are still grousing on Twitter over lingering...