Game-Panel <= 2.1.6 XSS

ORIGIONAL SOURCE: http://notlegal.ws/gamepanel.txt summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable...

Monopd 0.9.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/16981/info The Monopd game server is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27365.z...

Code injection

Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of service probably resource consumption via a crafted packet that causes a "ghost game" to be left on the server...

CVE-2006-0771

CVE-2006-0771 affects PunkBuster 1.180 and earlier (as used by Soldier of Fortune II and possibly other games). The issue is a format-string vulnerability in handling invalid cvar values when the server kicks a player and records the reason, allowing remote attackers to cause a denial of service ...

[Full-disclosure] Soldier of Fortune II format string through PunkBuster 1.180

Luigi Auriemma Application: Soldier of Fortune II with PunkBuster enabled http://www.ravensoft.com/soldier2.html http://www.PunkBuster.com Versions: PB for server = 1.180 Platforms: Windows, Linux and Mac Bug: format string Exploitation: remote, versus server in-game Date: 16 Feb 2006 Author: Lui...

Counter Strike (Half Life) game servers DoS

Incomplete client request leads to endless loop...

CVE-2006-0505

zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly creating and closing a game...

CVE-2006-0505

zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly creating and closing a game...

DEBIAN-CVE-2006-0467

Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...

Pioneers game server DoS

Oversized chat message causes game server to crash...

CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

CVE-2006-0045

CVE-2006-0045 affects the crawl game prior to 4.0.0, where saving/loading can trigger insecure execution of programs, allowing local users to gain full privileges. Root cause: the program does not securely call external commands during save/load. Practical impact is local privilege escalation; no...

Unreal Tournament 2004 "secure" Overflow (Win32)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

[SECURITY] [DSA 926-1] New ketm packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 926-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23rd, 2005 http://www.debian.org/security/faq -...

GameFlyXSS.txt

GameFly XSS Vulnerability ========================= Discovered By: Matthew Benenati Release Date: 12/1/2005 Severity: Medium A cross-site scripting vulnerability exists in the search page of the popular online video game rental service GameFly. Example:...

GLSA-200511-12 : Scorched 3D: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-12 Scorched 3D: Multiple vulnerabilities Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several buffer overflows. Impact : A remote attacker can exploit...

CVE-2005-3594

gamescore.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $playername, $playerscore, and $gamename variables...

Scorched 3D: Multiple vulnerabilities

Background Scorched 3D is a clone of the classic "Scorched Earth" DOS game, adding features like a 3D island environment and Internet multiplayer capabilities. Description Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several...

Buffer-overflow and crash in FlatFrag 0.3

Luigi Auriemma Application: FlatFrag http://www.tzi.de/jfk/projects/flatfrag/ Versions: = 0.3 Platforms: Windows, Linux and more Bugs: A buffer-overflow B NULL pointer crash Exploitation: remote, versus server Date: 02 Nov 2005 Author: Luigi Auriemma e-mail: [email protected] web:...