CVE-2015-5855

CVE-2015-5855 affects Apple iOS (pre‑9.0). A crafted Game Center app can disclose a player’s e‑mail address due to how Game Center handles user emails. Impact: information disclosure. Remediation: update to iOS 9 or later.

Apple Addresses Dozens of Vulnerabilities, Embraces Two-Factor Authentication in iOS 9

Apple pushed out iOS 9 Wednesday, addressing a cornucopia of vulnerabilities, including bugs that could lead to arbitrary code execution, credential leakage, and interface spoofing among other issues. But conspicuously absent from the update however is a fix for the vulnerability in AirDrop that...

Meet World's Fastest Wi-Fi Router (Looks Like an Alien)

In above picture, Have you noticed those numerous crazy spikes? The Device looks like an Alien artifact, which is actually the World's fastest wireless Wi-Fi router for the Game of Thrones generation. Unveiled at IFA 2015, Asus has launched its uniquely designed RT-AC5300 Wi-Fi router, which they...

NScripter vulnerable to buffer overflow

Overview NScripter is a script engine to build and execute games. NScripter contains a buffer overflow vulnerability due to a flaw in processing save data. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

[SECURITY] [DLA 297-1] wesnoth-1.8 security update

Package : wesnoth-1.8 Version : 1:1.8.5-1+deb6u2 CVE ID : CVE-2015-5069 CVE-2015-5070 Wesnoth implements a text preprocessing language that is used in conjunction with its own game scripting language. It also has a built-in Lua interpreter and API. Both the Lua API and the preprocessor make use o...

Updated wesnoth packages fix security vulnerability

Toom Lõhmus discovered that the Lua API and preprocessor in the Battle for Wesnoth game up to version 1.12.2 included could lead to client-side authentication information disclosure using maliciously crafted files with the .pdb extension CVE-2015-5069, CVE-2015-5070. This issue has been fixed usi...

[SECURITY] Fedora 22 Update: wesnoth-1.12.4-1.fc22

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

wesnoth: information leakage

Wesnoth implements a text preprocessing language that is used in conjunction with its own game scripting language. It also has a built-in Lua interpreter and API. Both the Lua API and the preprocessor make use of the same function filesystem::getwmllocation to resolve file paths so that only...

From the client game bug looking of security risks-vulnerability warning-the black bar safety net

Although the now app development a growing trend in web applications, large-scale software also makes extensive use of the existing framework with the existing frameworks and engines improve, the vast majority of security issues have been resolved. But encountered some customization needs,...

Pure Faction game server buffer overflow

Buffer overflow via game chat...

[SECURITY] Fedora 21 Update: wesnoth-1.12.2-1.fc21

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

[SECURITY] Fedora 20 Update: wesnoth-1.12.2-1.fc20

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

[SECURITY] Fedora 22 Update: wesnoth-1.12.2-1.fc22

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

CreA8social 'Add Game' Field HTML Injection Vulnerability

CreA8social is a social networking platform. An HTML injection vulnerability exists in the CreA8social 'Add Game' field, where attacker-supplied HTML or JavaScript code can run on the affected site. This allows an attacker to steal cookie-based authentication credentials and control the content...

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation

Summary Uplay PC is a desktop client which replaces individual game launchers previously used for Ubisoft games. With Uplay PC, you have all your Uplay enabled games and Uplay services in the same place and you get access to a whole new set of features for your PC games. Description Uplay for PC...

Like a Nesting Doll, Vawtrak Malware Has Many Layers

Researchers have peeled back more layers on Vawtrak, a relatively new banking Trojan so complex that those who have taken it apart have likened it to a Matryoshka, or Russian nesting doll. Virus Bulletin published a deep dive on the malware penned by Raul Alvarez, a researcher with Fortinet,...

CVE-2015-1054

Cross-site scripting XSS vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game...

Crea8Social 2.0 - Cross-Site Scripting Change Interface

Crea8Social 2.0 - Cross-Site Scripting Change Interface Exploit Title: Crea8Social v.2.0 XSS Change Interface Google Dork: intext:Copyright © 2014 CreA8social. Date: January 3, 2015 Exploit Author: r0seMary Vendor Homepage: http://crea8social.com Software Link:...

Crea8Social 2.0 Cross Site Scripting

Exploit Title: Crea8Social v.2.0 XSS Change Interface Google Dork: intext:Copyright © 2014 CreA8social. Date: January 3, 2015 Exploit Author: r0seMary Vendor Homepage: http://crea8social.com Software Link: http://codecanyon.net/item/crea8social-php-social-networking-platform-v20/9211270 or...

BitRaider Streaming Client 1.3.3.4098 - Local Privilege Escalation

BitRaider Streaming Client 1.3.3.4098 Local Privilege Escalation Vulnerability Vendor: BitRaider, LLC Product web page: http://www.bitraider.com Affected version: 1.3.3.4098 Summary: BitRaider is a video game streaming and download service. Desc: BitRaider contains a flaw that leads to...