2885 matches found
Use after free
The Sniper Shooter Free - Fun Game aka com.fungamesforfree.snipershooter.free application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5624
The CVE-2014-5624 entry applies to the Android app “The Sniper Shooter Free - Fun Game” (com.fungamesforfree.snipershooter.free), version 2.8, where SSL connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof trusted servers and obtain sensitive ...
CVE-2014-5554
CVE-2014-5554 : The Android app “Fun Preschool Creativity Game” (package air.com.tribalnova.ilearnwith.ipad.MotherAppEn), version 1.6.2, does not verify SSL/TLS X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate...
70% of South Korean Population Victimized In Online Gaming Heist
More than half of South Korea's 50 million population aged between 15 and 65 have been affected in a massive data breach, compromising their personal information. The data breach came to light when 16 individual were arrested following the theft of about 220 million stolen records from a number o...
[SECURITY] Fedora 20 Update: mumble-1.2.6-1.fc20.1
Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...
WordPress Game-Tabs plugin 'n' Parameter Cross Site Scripting Vulnerability
WordPress Game-Tabs Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4531
Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...
CVE-2014-4531
The CVE-2014-4531 entry describes a Cross-Site Scripting (XSS) vulnerability in WordPress Game-Tabs plugin versions 0.4.0 and earlier, exploitable via the n parameter in main_page.php. According to the provided data, affected software is the WordPress Game-Tabs plugin
CVE-2014-4531
Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...
AOL Instant Messenger 4.x/5.x Smiley Icon Location Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13553/info AOL Instant Messenger is reported prone to a remote denial of service vulnerability. The issue manifests when the affected client application handles a chat invitation, a file transfer, or a game request that...
gMotor2 Game Engine - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25358/info The gMotor2 game engine is prone to multiple code-execution and denial-of-service vulnerabilities. Four vulnerabilities were reported. These vulnerabilities may be triggered by malicious client requests to game...
Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the client to negotiate a connection to the...
Bontago Game Server 1.1 - Remote Nickname Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12603/info The Bontago game server is reported to be affected by a remote buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on client-supplied 'nickname'...
NetBSD 5.0 and below Hack PATH Environment overflow proof of concept
No description provided by source. !/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If you can exploi...
Sony Playstation 3 (PS3) 4.31 - Save Game Preview SFO File Handling Local Command Execution
No description provided by source...
Netrek 2.12.0 - pmessage2() Remote Limited Format String Exploit
No description provided by source. Luigi Auriemma Application: Netrek http://www.netrek.org Versions: = 2.12.0 Vanilla server Platforms: nix and Windows Bug: format string Exploitation: remote in-game Date: 02 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Live For Speed S1/S2 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25327/info Live For Speed is prone to four vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits could allow attackers to execute arbitrary code or to crash game servers...
SGI IRIX 6.2 SpaceWare Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/471/info The SpaceBall game, shipped with Irix 6.2 from Silicon Graphics contains a security hole which could result in the compromise of the root account. By blindly taking the contents of the $HOSTNAME variable, and not...
RndLabs Babo Violent 2 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25329/info Babo Violent 2 is prone to four vulnerabilities: a format-string issue and three denial-of-service issues. Successful attacks could allow attackers to execute arbitrary code or crash game servers...