2880 matches found
CVE-2020-6019
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...
CVE-2020-6019
Valve's Game Networking Sockets/Steam Sockets before v1.2.0 contains a vulnerability in CConnectionTransportUDPBase::Received_Data() where inlined statistics messages trigger a libprotobuf exception, causing a crash. Affected component appears in both Steam server and client code paths per multip...
PT-2020-18894 · Google +1 · Libprotobuf +1
Name of the Vulnerable Software and Affected Versions: Valve's Game Networking Sockets versions prior to v1.2.0 Description: The issue arises from improper handling of inlined statistics messages in the CConnectionTransportUDPBase::Received Data function, leading to an exception thrown from...
Rockstar Games: RDR2 game service method allows adding any player to a new Posse without consent
In this report, the researcher discovered a game service method in Red Dead Online that could be manipulated into allowing an attacker to create new Posses and add any Social Club account to it, without their knowledge or consent. We have resolved this by updating the service method to prevent th...
digitalgametechnology.com Cross Site Scripting vulnerability OBB-1478489
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
REvil Gang Promises a Big Video-Game Hit; Claims Massive Revenue
The REvil ransomware gang claims it will rake in $100 million by year’s end. That’s according to a REvil group leader in a rare Q&A with the YouTube Channel for tech blog “Russian OSINT.” During the live interview, the REvil hacker warned of a “big attack coming…linked to a very large video game...
MediaWiki RandomGameUnit Cross-Site Scripting Vulnerability
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki RandomGameUnit versi...
CVE-2020-25204
The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver. The purpose of this broadcast receiver is to show an in-game push notification to the player. However, the...
God Kings 0.60.1 Notification Spoofing
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: God Kings Vendor URL: https://play.google.com/store/apps/details?id=com.innogames.gkandroid Type: Improper Verification of Intent by Broadcast Receiver CWE-925 Date found: 2020-09-07 Date...
Command Execution Vulnerability in Perfect Game Platform (Windows Client)
Perfect Game Platform is a game platform created by Perfect that integrates account, game, and service, and includes all of Perfect's end-game and page games. A command execution vulnerability exists in Perfect Game Platform Windows client, which can be exploited by an attacker to gain control of...
Apk-Medit - Memory Search And Patch Tool On Debuggable Apk Without Root & Ndk
Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Motivation Memory modification is the easiest way to cheat in games, it is one of the items to be checked in the security test. There are also cheat tools that can b...
Game Titles Watch Dogs: Legion, Albion Both Targeted by Hackers
A ransomware gang that just emerged this month dubbed Egregor claims to have hacked the source code to the upcoming gaming release, Watch Dogs: Legion. And in separate gaming news, a popular fantasy title called Albion — a massive multiplayer online role-playing game MMORPG — has been hacked...
game-over.net Cross Site Scripting vulnerability OBB-1416560
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Code Execution Vulnerability in 37GameBox of Shanghai Hardtone Network Technology Co.
37GameBox is a web game box tool under Sanqi Entertainment. Ltd. 37GameBox suffers from a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code during the immediate experience after installation...
FIFA 21 game scams: watch out for unsporting conduct
Despite COVID-19, soccer season is slowly ebbing its way back into daily life around the world. Its also sneaking back onto TV screens in the form of huge-budget video games. Step up to the plate, FIFA 21. FIFA games: the football juggernaut The FIFA series is an absolute monster in terms of sale...
Xi'an Maiyu Networks Technology Co.'s Milu Game App Has Logic Flaw Vulnerabilities
Founded in 2016, Xi'an MaiYou Network Technology Co., Ltd. is an innovative internet enterprise focusing on hand game operation and network technology development. Xi'an MaiYou Network Technology Co., Ltd.'s Milu game app has a logic flaw vulnerability, which can be exploited by an attacker to...
[SECURITY] Fedora 32 Update: mumble-1.3.2-1.fc32
Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...
Video-Game Piracy Group 'Team Xecuter' Leaders in Custody
The Department of Justice DoJ has nabbed two alleged leaders of a global, notorious video-game piracy group called Team Xecuter. The two leaders in custody, Max Louarn 48, a French national of Avignon and Gary Bowser 51, a Canadian national from Santo Domingo, Dominican Republic, allegedly led th...
[SECURITY] Fedora 31 Update: mumble-1.3.2-1.fc31
Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...
[SECURITY] Fedora 33 Update: mumble-1.3.2-1.fc33
Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...