Design/Logic Flaw

quickentity-editor-next is an open source, system local, video game asset editor. In affected versions HTML tags in entity names are not sanitised XSS vulnerability. Allows arbitrary code execution within the browser sandbox, among other things, simply from loading a file containing a script tag ...

CVE-2023-27472 HTML tags in entity names in the tree view are not sanitised in quickentity-editor-next

quickentity-editor-next is an open source, system local, video game asset editor. In affected versions HTML tags in entity names are not sanitised XSS vulnerability. Allows arbitrary code execution within the browser sandbox, among other things, simply from loading a file containing a script tag ...

CVE-2023-27472

The CVE-2023-27472 issue affects quickentity-editor-next. It arises because HTML tags in entity names are not sanitized, enabling XSS and potentially arbitrary code execution within the browser sandbox simply by loading a file containing a script tag in an entity name. The vulnerability is mitiga...

ChromeLoader Malware Targeting Gamers via Fake Nintendo and Steam Game Hacks

A new ChromeLoader malware campaign has been observed being distributed via virtual hard disk VHD files, marking a deviation from the ISO optical disc image format. "These VHD files are being distributed with filenames that make them appear like either hacks or cracks for Nintendo and Steam games...

The mobile malware threat landscape in 2022

These statistics are based on detection verdicts of Kaspersky products received from users who consented to providing statistical data. Figures of the year In 2022, Kaspersky mobile products and technology detected: 1,661,743 malicious installers 196,476 new mobile banking Trojans 10,543 new mobi...

MAL-2023-2482 Malicious code in adgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 14981b32b9e5609dea938d5b37bfc621148afd6177b415e9a2b1764d792a28e9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

SUSE CVE-2006-4006

The dogameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the sendpkg function packets.c to use this data size when sending a reply, and allows remote attackers to read portions of server memory...

SUSE CVE-2007-3917

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service crash via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the...

SUSE CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

SUSE CVE-2016-9958

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

SUSE CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

SUSE CVE-2016-9961

game-music-emu before 0.6.1 mishandles unspecified integer values...

SUSE CVE-2016-9959

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values...

SUSE CVE-2018-0620

Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

SUSE CVE-2021-30184

GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN Portable Game Notation data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmdpgnload and cmdpgnreplay functions in frontend/cmd.cc...

Improper Input Validation

freedroidrpg:sid is vulnerable to Improper Input Validation. files within 'savestructinternal.c' where save game data is composed can be modified to add in any lua code which can lead to arbitrary code execution when loading...

Hackers Create Malicious Dota 2 Game Modes to Secretly Access Players' Systems

An unknown threat actor created malicious game modes for the Dota 2 multiplayer online battle arena MOBA video game that could have been exploited to establish backdoor access to players' systems. The modes exploited a high-severity flaw in the V8 JavaScript engine tracked as CVE-2021-38003 CVSS...

Hackers Create Malicious Dota 2 Game Modes to Secretly Access Players' Systems

An unknown threat actor created malicious game modes for the Dota 2 multiplayer online battle arena MOBA video game that could have been exploited to establish backdoor access to players' systems. The modes exploited a high-severity flaw in the V8 JavaScript engine tracked as CVE-2021-38003 CVSS...

onlinegamebooks.com Cross Site Scripting vulnerability OBB-3183032

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

What is Word Unscrambler In Gaming?

By Owais Sultan Are you tired of getting stuck on those tricky word puzzles in your favourite mobile game? Have you… This is a post from HackRead.com Read the original post: What is Word Unscrambler In Gaming?...