[SECURITY] Fedora 28 Update: scummvm-2.0.0-1.fc28

ScummVM is a program which allows you to run certain classic graphical point-and-click adventure games, provided you already have their data files. ScummVM supports many adventure games, including LucasArts SCUMM games such as Monkey Island 1-3, Day of the Tentacle, Sam & Max, ..., many of Sierra...

Rockstar Games: LFI and SSRF via XXE in emblem editor

This summary is provided by the researcher who submitted this report, @alexbirsan . About one year after I started messing with the emblem editor, I finally found a full SSRF and LFI. I was able to extract text files from the server and HTTP responses by rendering them on my crew emblem. For thos...

my.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-610314 Description| Value ---|--- Affected Website:| my.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hr.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-608083 Description| Value ---|--- Affected Website:| hr.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploit Targets Nvidia Tegra-Based Nintendo Systems

UPDATE – Nvidia sought to downplay a vulnerability discovered in its Tegra X1-based systems in a recently published notice. “A researcher indicates that a person with physical access to older Tegra-based processors could connect to the device’s USB port, bypass the secure boot and execute...

ie.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-606883 Description| Value ---|--- Affected Website:| ie.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fi.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-606848 Description| Value ---|--- Affected Website:| fi.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gr.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-606153 Description| Value ---|--- Affected Website:| gr.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ad.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-604902 Description| Value ---|--- Affected Website:| ad.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eg.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-603512 Description| Value ---|--- Affected Website:| eg.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

APT Trends report Q1 2018

In the second quarter of 2017, Kaspersky's Global Research and Analysis Team GReAT began publishing summaries of the quarter's private threat intelligence reports in an effort to make the public aware of the research we have been conducting. This report serves as the next installment, focusing on...

pt.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-599822 Description| Value ---|--- Affected Website:| pt.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cy.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-593756 Description| Value ---|--- Affected Website:| cy.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Olympic Destroyer: A False Flag Confusion Bomb

CANCUN, Mexico – A postmortem of the Olympic Destroyer malware used in the PyeongChang Olympics attack reveals a deliberate attempt by adversaries to plant a false flags when it comes to attribution, according to researchers. Days after the crippling attack on the backend networks tied to the...

citydomination.games XSS vulnerability

Open Bug Bounty ID: OBB-572626 Description| Value ---|--- Affected Website:| citydomination.games Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosur...

Mail.ru: [online.games.mail.ru] - Sensitive information disclosure

include files with potentially sensitive configuration information were available via HTTP. online.games.mail.ru is not covered by bug bounty, an award was issued as a bonus...

nomadgames.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-547400 Description| Value ---|--- Affected Website:| nomadgames.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tumder 2.1 - SQL Injection

Exploit Title: Tumder - An Arcade Games Platform 2.1 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://sndr.co.ve/ Software Link: https://codecanyon.net/item/tumder-an-arcade-games-platform/18726994 Version: 2.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5984...

Critical Flaw in All Blizzard Games Could Let Hackers Hijack Millions of PCs

A Google security researcher has discovered a severe vulnerability in Blizzard games that could allow remote attackers to run malicious code on gamers’ computers. Played every month by half a billion users—World of Warcraft, Overwatch, Diablo III, Hearthstone and Starcraft II are popular online...

Popular Sonic the HedgeHog Apps at Risk of Leaking User Data to Unverified Servers

Three Sonic the Hedgehog games for Android, downloaded over 100 million times, are at risk of leaking user geolocation and other personal device data to suspicious servers, putting users at risk of man-in-the-middle attacks and similar type vulnerabilities, according to security experts. The game...