YooB Games - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application YooB Games published at the 'play' market has multiple vulnerabilities...

store.firaxisgames.com Open Redirect vulnerability

Vulnerable URL: https://store.firaxisgames.com/store/fxs/enUS/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

PPPoker-Free Poker&Home Games - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PPPoker-Free Poker&Home Games published at the 'play' market has multiple vulnerabilities...

Christmas Games - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Christmas Games published at the 'play' market has multiple vulnerabilities...

clubabonnes.ladepeche.fr XSS vulnerability

Vulnerable URL: https://clubabonnes.ladepeche.fr/jeux.html?invit=alertOPENBUGBOUNTY...

games.espn.com XSS vulnerability

Vulnerable URL: http://games.espn.com/flb/addeddropped/--%3E%3CsvG%20onLoad=alert%28/openbugbounty/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

Rockstar Games: DOM based reflected XSS in rockstargames.com/newswire/tags through cross domain ajax request

Hi, I have found a reflected XSS issue in http://www.rockstargames.com/newswire/tags which is , IMO , somekinda tricky. PoC: - URL: http://www.rockstargames.com/newswire/tags/?tags=%2e%2e%2e%2e%2e%2e\commentsdal\users\getGlobalLoginSettings%2ejson?callback=alert%2fxss%2f;%2f%2f - Vulnerable...

Design/Logic Flaw

AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Happy Wardrobe...

CVE-2016-4853

CVE-2016-4853 affects AKABEi SOFT2 games. Affected component: game code that loads saved data. Root cause: crafted saved data enables an OS command injection, allowing execution of arbitrary commands. Impact: remote attacker could cause arbitrary commands to run within the affected game context, ...

AKABEi SOFT2 Games Operating System Command Injection Vulnerability

AKABEi SOFT2 G-senjou no Maou - The Devil on G-String and other games developed by AKABEi SOFT2 in Japan. An operating system command injection vulnerability exists in AKABEi SOFT2 Games. An attacker could exploit this vulnerability to execute arbitrary operating system commands in the context of...

JVN#85213412: Multiple AKABEi SOFT2 LTD. games vulnerable to OS command injection

Multiple games provided by AKABEi SOFT2 LTD. contain an OS command injection vulnerability CWE-78 due to an issue in loading saved data. Impact When specially crafted saved data is loaded, an arbitrary OS command may be executed. Solution Apply a Workaround The following workaround can mitigate t...

GTA Fan Forum Hacked: Old vBulletin Software To Blame

Outdated vBulletin forum software is being blamed for the breach of a Grand Theft Auto fan forum called GTAGaming. It marks the second time in two days a gaming forum has been targeted by hackers and that a SQL injection vulnerability is believed to have been exploited. The fan website notified...

Epic Games Forums Hacked, 800,000 User Accounts Exposed

Epic Games is warning users of a breach that impacts 800,000 user accounts tied to the company’s online forums. On Monday, the game developer temporarily shut down many of its forums and advised users to change passwords on any accounts that shared the same credentials for some of its forums. Epi...

Epic Games Forum Hacked, Once Again — Over 800,000 Gamers' Data Stolen

If you are a fan of Unreal Tournament from Epic Games or ever have participated in discussions on the online forums run by Epic Games, you possibly need to change your forum password as soon as possible. It seems the Unreal Engine and its creators, Epic Games' forums have recently been compromise...

Rockstar Games: Reflected XSS via #tags= while using a callback in newswire http://www.rockstargames.com/newswire

Hello, Here's the link: http://www.rockstargames.com/newswire/tags/?tags=../../commentsdal/users/getGlobalLoginSettings.json?callback=alert%28document.domain%29// Thanks, Ben...

Rockstar Games: CSRF in 'set.php' via age causes stored XSS on 'get.php' - http://www.rockstargames.com/php/videoplayer_cache/get.php'

Hello, Background: Sending a POST request to set.php with age='PAYLOAD' will cause a stored XSS on the GET.php file most likely caused by the cookie, since that's what the age is based on. For this vulnerability and in order to demonstrate BOTH CSRF and XSS I have written a simple script tested o...

Rockstar Games: Reflected XSS in /Videos/ via calling a callback http://www.rockstargames.com/videos/#/?lb=

The researcher found a Reflected XSS vulnerability in our video player service that seemed to be reproducible in multiple areas of the site. In recognition of how widespread the issue was, we opted to award a bonus...

Rockstar Games: Reflected XSS in reddeadredemption Site located at www.rockstargames.com/reddeadredemption

The researcher found that one of our video players had a Reflected XSS vulnerability, and was able to demonstrate the vulnerability with a POC. The POC also included a WAF bypass, allowing us to fix two problems at once, so in recognition of that fact we opted to award a bonus...

rockstargames.com Open Redirect vulnerability

Vulnerable URL:...

Katastrophe - Command Line Tool to download torrents from Kickass Torrents

A Command-Line Interface for scraping Kickass torrents kat.cr. Provides options to scrape top torrents in given categories, or searching for specific torrents. The user can select single, multiple or even specify a range for the torrent to download from any category. Installation Using pip $ pip...