MAL-2024-10172 Malicious code in text-adventure-game (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d130695c8c001b5c9dcdb269da4709b4b1d6f75407f319a7ed709f2370212fdd --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: text-adventure-game-ch-2024-07 Reasons based on the campaign:...

Malicious code in text-adventure-game (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d130695c8c001b5c9dcdb269da4709b4b1d6f75407f319a7ed709f2370212fdd --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: text-adventure-game-ch-2024-07 Reasons based on the campaign:...

PT-2024-28686 · Unknown · R74N Sandboxels

Name of the Vulnerable Software and Affected Versions: R74n Sandboxels versions 1.9 through 1.9.5 Description: The issue allows for XSS via a message in a modified saved-game file. This was fixed in a hotfix to 1.9.5 on 2024-06-29. Recommendations: For versions 1.9 through 1.9.5, apply the hotfix...

Sandboxels Security Vulnerabilities

Sandboxels is a browser game by the US-based team R74n. A security vulnerability exists in Sandboxels versions 1.9 through 1.9.5. An attacker exploited the vulnerability to perform a cross-site scripting attack...

CVE-2024-39828

CVE-2024-39828 affects R74n Sandboxels versions 1.9 through 1.9.5, enabling cross-site scripting via a message in a manipulated saved-game file. Red Hat and NVD entries concur; the issue was fixed in a hotfix to version 1.9.5 released on 2024-06-29. The Red Hat/CVE notes and related enrichments r...

MAL-2024-6927 Malicious code in game-shuffle_cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in game-shuffle_cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in XboxGamebar (NuGet)

--- -= Per source details. Do not edit below this line.=-...

June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview

None None...

game-info.net Cross Site Scripting vulnerability OBB-3933204

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora: Security Advisory (FEDORA-2024-e4717532c4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-4d785e16a2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: crosswords-0.3.13-1.fc39

A simple and fun game of crosswords. Load your crossword files, or play one of the included games. Features include: - Support for shaped and colored crosswords - Loading .ipuz and .puz files - Hint support, such as showing mistakes and suggesting words - Dark mode support - Locally installed...

[SECURITY] Fedora 40 Update: crosswords-0.3.13-1.fc40

A simple and fun game of crosswords. Load your crossword files, or play one of the included games. Features include: - Support for shaped and colored crosswords - Loading .ipuz and .puz files - Hint support, such as showing mistakes and suggesting words - Dark mode support - Locally installed...

Why Game Companies Are Adopting Distributed Cloud Computing

Global game developers are providing improved performance, better in-game experiences, and boosting gamer retention with distributed cloud computing...

CVE-2024-31226 Sunshine's unquoted executable path could lead to hijacked execution flow

Sunshine is a self-hosted game stream host for Moonlight. Users who ran Sunshine versions 0.17.0 through 0.22.2 as a service on Windows may be impacted when terminating the service if an attacked placed a file named C:\Program.exe, C:\Program.bat, or C:\Program.cmd on the user's computer. This...

CVE-2024-34068 Server-side Request Forgery during remote file pull in Pterodactyl wings

Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the previously implemented access control GHSA-6rg3-8h8x-5xfv that prevents accessing internal endpoints of the node hosting Wings in the pull endpoint. Thi...

New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for Stealth

A new information stealer has been found leveraging Lua bytecode for added stealth and sophistication, findings from McAfee Labs reveal. The cybersecurity firm has assessed it to be a variant of a known malware called RedLine Stealer owing to the fact that the command-and-control C2 server IP...

CVE-2024-31221

Sunshine is a self-hosted game stream host for Moonlight. Starting in version 0.10.0 and prior to version 0.23.0, after unpairing all devices in the web UI interface and then pairing only one device, all of the previously devices will be temporarily paired. Version 0.23.0 contains a patch for the...

CVE-2024-31221

CVE-2024-31221 affects Sunshine, a self-hosted game stream host for Moonlight. Reports across multiple sources indicate that versions 0.10.0 through 0.22.x are vulnerable: after unpairing all devices via the web UI and then pairing a single device, previously paired devices may be temporarily re-...