CVE-2025-66687

Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files...

CVE-2025-66687

Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files...

CVE-2025-66687

Doom Launcher version 3.8.1.0 is vulnerable to a Directory Traversal attack. The root cause is a lack of file path validation during the extraction of game files, which could allow an attacker to access or modify files outside of the intended directory. No specific remediation, exploit links, or ...

CVE-2024-39828

R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file. This was fixed in a hotfix to 1.9.5 on 2024-06-29...

CVE-2024-39828

The browser game R74n Sandboxels versions 1.9 through 1.9.5 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input when processing a message in a modified saved-game file . This issue was addressed in a hotfix to version 1.9.5 released on 2024-06-29. ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...