2885 matches found
GHSA-QF8X-VQJV-92GR Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Impact Weak validation of the Apple certificate URL in the Apple Game Center authentication adapter allows to bypass authentication and makes the server vulnerable to DoS attacks. Patches The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource...
CVE-2022-24901
Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource th...
Authentication flaw
Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource th...
CVE-2022-24901 Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource th...
CVE-2022-24901
CVE-2022-24901 describes an authentication bypass and potential denial of service in the Apple Game Center authentication adapter used by parse-server. The root cause is improper validation of the Apple certificate URL, enabling bypassing authentication and exposing the server to DoS. The publish...
CVE-2022-24901 Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource th...
CVE-2022-24901 Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource th...
PT-2022-16971 · Apple · Gamecenter
Name of the Vulnerable Software and Affected Versions: Apple Game Center affected versions not specified Description: The issue arises from improper validation of the Apple certificate URL in the Apple Game Center authentication adapter, allowing attackers to bypass authentication. This makes the...
WordPress Coru LFMember plugin <= 1.0.2 - Arbitrary Game Deletion/Activation via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Game Deletion/Activation via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress Coru LFMember plugin versions = 1.0.2. Solution No patched version is available...
WordPress Coru LFMember 1.0.2 Cross Site Scripting Vulnerability
Exploit Title: WordPress Plugin Coru LFMember - Stored Cross Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/Coru LFMember/ Version: 1.0.2 Tested on: Firefox Contact me: email protected Vulnerable Code: " name="gameimage" / "...
GHSA-3QXR-Q72Q-HMWP Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
Cross-site Scripting (XSS)
Overview org.jvnet.hudson.plugins:ci-game is a Jenkins Continuous Integration Game plugin Affected versions of this package are vulnerable to Cross-site Scripting XSS. An attacker can inject arbitrary web script or HTML by sending a crafted request. Details Cross-site scripting or XSS is a code...
Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2021-23247
A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...
CVE-2021-23247
A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...
CVE-2021-23247
A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...
Command injection
A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...
CVE-2021-23247
A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...
CVE-2021-23247
CVE-2021-23247 is described across multiple sources as a command-injection vulnerability in the Quick Game Engine, allowing a remote attacker to execute arbitrary code. Affected component/behavior: the Quick App environment within the engine. Root cause and technical specifics are not fully discl...
quick game engine 命令注入漏洞
quick game engine is an open source game framework. A command injection vulnerability exists in quick game engine, which stems from the fact that the quick app can arbitrarily execute remote code. A remote attacker can exploit this vulnerability to execute arbitrary code in quick game engine...