CVE-2016-9958

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

DEBIAN-CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

CVE-2016-9958

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

CVE-2016-9959

CVE-2016-9959 affects Game Music Emu prior to 0.6.1. The vulnerability allows a remote attacker to cause out-of-bounds 8-bit values in SPC/music processing, as described by NVD. Consequences are stated as enabling potential arbitrary behavior from crafted inputs; exploitation details are not prov...

CVE-2016-9958

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

CVE-2016-9959

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values...

CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

CVE-2016-9958

CVE-2016-9958 affects Game Music Emu, prior to version 0.6.1. The vulnerability enables a remote attacker to cause arbitrary memory writes, potentially enabling arbitrary code execution or DoS when opening a crafted SPC file. Public sources (Gentoo GLSA 201707-02 and related advisories) instruct ...

CVE-2016-9957

Summary: CVE-2016-9957 corresponds to a stack-based buffer overflow in the Game Music Emu library prior to version 0.6.1. Multiple connected advisories (Gentoo GLSA-201707-02, Fedora advisories) describe a remotely triggerable condition: a user could be enticed to open a specially crafted SPC mus...

Security Bypass Vulnerabilities in Multiple Game Engine Products

ioquake3 and others are open source, free, cross-platform Quake 3-based FPS game engines. A security vulnerability exists in the auto-downloading feature in several game engine products, which stems from the program's failure to adequately restrict content. An attacker can exploit the vulnerabili...

Debian DSA-3812-1 : ioquake3 - security update

It was discovered that ioquake3, a modified version of the ioQuake3 game engine performs insufficent restrictions on automatically downloaded content pk3 files or game code, which allows malicious game servers to modify configuration settings including driver settings. %NASLMINLEVEL 70300 C Tenab...

Debian Security Advisory DSA 3812-1 (ioquake3 - security update)

It was discovered that ioquake3, a modified version of the ioQuake3 game engine performs insufficent restrictions on automatically downloaded content pk3 files or game code, which allows malicious game servers to modify configuration settings including driver settings. OpenVAS Vulnerability Test...

game.co.uk XSS vulnerability

Vulnerable URL:...

Joomla StreetGuessr Game 1.0 SQL Injection

Exploit Title: Joomla! Component StreetGuessr Game v1.0 - SQL Injection Google Dork: inurl:index.php?option=comstreetguess Date: 02.03.2017 Vendor Homepage: https://www.nordmograph.com/ Software: https://extensions.joomla.org/extensions/extension/sports-a-games/streetguessr-game/ Demo:...

Joomla! Component StreetGuessr Game 1.0 - SQL Injection

Joomla! Component StreetGuessr Game 1.0 - SQL Injection Exploit Title: Joomla! Component StreetGuessr Game v1.0 - SQL Injection Google Dork: inurl:index.php?option=comstreetguess Date: 02.03.2017 Vendor Homepage: https://www.nordmograph.com/ Software:...

Joomla! Component StreetGuessr Game 1.0 - SQL Injection

Exploit Title: Joomla! Component StreetGuessr Game v1.0 - SQL Injection Google Dork: inurl:index.php?option=comstreetguess Date: 02.03.2017 Vendor Homepage: https://www.nordmograph.com/ Software: https://extensions.joomla.org/extensions/extension/sports-a-games/streetguessr-game/ Demo:...

Updated audacious-plugins packages fix security vulnerability

Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961. These issues were...

Mobile Application Security Training Platform: Security Shepherd

The OWASP Security Shepherd project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienced engineers and sharpen...