About the security content of iOS 17.7 and iPadOS 17.7

About the security content of iOS 17.7 and iPadOS 17.7 This document describes the security content of iOS 17.7 and iPadOS 17.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

Ransomware Disguised as a Game: Kransom’s Attack Through DLL Side-Loading

Kransom ransomware hides within the StarRail game using DLL side-loading and a legitimate certificate from COGNOSPHERE PTE. LTD.…...

CVE-2024-45407

Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation error. The pairing attempt fails due to the incorrect PIN, b...

CVE-2024-45407 Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client

Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation error. The pairing attempt fails due to the incorrect PIN, b...

CVE-2024-45407

Sunshine is a self-hosted game stream host for Moonlight. The CVE describes a failure in pairing state management where a MITM during pairing causes the attacker’s certificate to be incorrectly persisted before the pairing completes, potentially enabling access to the attacker’s certificate and a...

EMI 安全漏洞

EMI is a powerful and accessible item and recipe viewer for Minecraft by Emily Rose Ploszaj Individual Developer. A security vulnerability exists in EMI v.1.1.10 and earlier versions that stems from the inability to validate slot indexing and reduce stack counts in the EMI mod for Minecraft...

Malicious code in system-library-gameanalytics-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c2f4730ced83dee1092ba6678be557ca2aabeb26a07593f183802984e4a903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

Collateral Damage Collateral Damage is a kernel exploit for Xb...

Friday Squid Blogging: 1994 Lair of Squid Game

I didnt know: In 1994, Hewlett-Packard released a miracle machine: the HP 200LX pocket-size PC. In the depths of the device, among the MS-DOS productivity apps built into its fixed memory, there lurked a first-person maze game called Lair of Squid. … In Lair of Squid, youre trapped in an underwat...

Malicious code in text-adventure-game (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d130695c8c001b5c9dcdb269da4709b4b1d6f75407f319a7ed709f2370212fdd --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: text-adventure-game-ch-2024-07 Reasons based on the campaign:...

MAL-2024-10172 Malicious code in text-adventure-game (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d130695c8c001b5c9dcdb269da4709b4b1d6f75407f319a7ed709f2370212fdd --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: text-adventure-game-ch-2024-07 Reasons based on the campaign:...

PT-2024-28686 · Unknown · R74N Sandboxels

Name of the Vulnerable Software and Affected Versions: R74n Sandboxels versions 1.9 through 1.9.5 Description: The issue allows for XSS via a message in a modified saved-game file. This was fixed in a hotfix to 1.9.5 on 2024-06-29. Recommendations: For versions 1.9 through 1.9.5, apply the hotfix...

Sandboxels Security Vulnerabilities

Sandboxels is a browser game by the US-based team R74n. A security vulnerability exists in Sandboxels versions 1.9 through 1.9.5. An attacker exploited the vulnerability to perform a cross-site scripting attack...

CVE-2024-39828

CVE-2024-39828 affects R74n Sandboxels versions 1.9 through 1.9.5, enabling cross-site scripting via a message in a manipulated saved-game file. Red Hat and NVD entries concur; the issue was fixed in a hotfix to version 1.9.5 released on 2024-06-29. The Red Hat/CVE notes and related enrichments r...

Malicious code in game-shuffle_cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6927 Malicious code in game-shuffle_cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in XboxGamebar (NuGet)

--- -= Per source details. Do not edit below this line.=-...

June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview

None None...

game-info.net Cross Site Scripting vulnerability OBB-3933204

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...