Dota 2 7.23f - Denial of Service (PoC)

Exploit Title: Dota 2 7.23f - Denial of Service PoC Google Dork: N/A Date: 2020-02-05 Exploit Author: Bogdan Kurinnoy [email protected] bi7s Vendor Homepage: https://www.valvesoftware.com/en/ Software Link: N/A Version: 7.23f Tested on: Windows 10 x64 CVE : CVE-2020-7949 Valve Dota 2...

[SECURITY] Fedora 31 Update: nethack-3.6.5-1.fc31

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

[SECURITY] Fedora 30 Update: nethack-3.6.5-1.fc30

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

Mail.ru: 3igames.mail.ru SQL Injection

Error based SQLi: https://wrd-pay.3igames.mail.ru/?openid=21&appid=1&ts=12&payitem=2&token=1&billno=1&version=1&zoneid=1&providetype=1&amt=1&payamtcoins=1&pubacctpayamtcoins=1&sig=1%27,1,1,1,select%20expselectfromselect%20userx,1;--%20- SQLMAP: sqlmap -u...

game-debate.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1084620 Security Researcher Broly157 Helped patch 1577 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting game-debate.com website a...

CVE-2020-7950

meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a vulnerable function call...

[SECURITY] Fedora 30 Update: nethack-3.6.4-1.fc30

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

NetHack Buffer Overflow Vulnerability

NetHack is a role-playing single-player game. A buffer overflow vulnerability exists in NetHack version 3.6.x prior to 3.6.4. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and wri...

Threat spotlight: the curious case of Ryuk ransomware

Ryuk. A name once unique to a fictional character in a popular Japanese comic book and cartoon series is now a name that appears in several rosters of the nastiest ransomware to ever grace the wild web. For an incredibly young strain—only 15 months old—Ryuk ransomware gaining such notoriety is...

Multiple Intel NUC Firmware Multiple Security Vulnerabilities

Description Multiple Intel NUC Firmware are prone to multiple unspecified security vulnerabilities. Attackers can leverage these issues to gain elevated privileges. Technologies Affected Intel Compute Card CD1IV128MK BIOS Intel Compute Card CD1M3128MK BIOS Intel Compute Card CD1P64GK BIOS Intel...

New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...

GHSA-4X6V-RWH4-55JW Pomelo allows external control of critical state data

Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious...

Cross site scripting

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

CVE-2012-4441

CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...

CVE-2019-18954

Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious...

Xxe

Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious...

Razer: Through blocking the redirect in /* the attacker able to bypass Authentication To see Sensitive Data sush as Game Keys , Emails ,..

The rsa3027.razersynapse.com server suffered a SQLi vulnerability which allowed write access to the server in the context of Cortex Deals. This allowed access to game key information from giveaways and emails of users who claimed these giveaways. This vulnerability was reported 11/12 and closed b...

Valve: [Portal 2] Remote Code Execution via voice packets

Description RCE can be achieved on other players via voice packets due to the lack of length validation when reading into a stack based buffer. POC 1. As the victim, invite the attacker into a game. 2. Wait until both players have loaded into the game. 3. Inject the following DLL into the attacke...