The popular game "heroes Union" and then exposed vulnerabilities: hackers can access player accounts to steal credits and coins-vulnerability warning-the black bar safety net

Famous foreign community Reddit recently broke the popular game "heroes Union" （LOL）one of the exploit programs exploit, the attacker can access the player account via a Web browser to open the in-game store for credits or gold transactions. Vulnerability description Initially this vulnerability ...

CVE-2015-1054

Cross-site scripting XSS vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game...

CoolReaper Backdoor Found On CoolPad Android Mobile Devices

A popular Android smartphone sold primarily in China and Taiwan but also available worldwide, contains a backdoor from the manufacturer that is being used to push pop-up advertisements and install apps without users’ consent. The Coolpad devices, however, are ripe for much more malicious abuse,...

[SECURITY] Fedora 21 Update: teeworlds-0.6.3-1.fc21

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbitrary web script or HTML via the 1 idcustom parameter in an amanmenu request or 2 idgame parameter in an alms/games/edit request to appCore/index.php...

CVE-2014-5257

Multiple cross-site scripting XSS vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbitrary web script or HTML via the 1 idcustom parameter in an amanmenu request or 2 idgame parameter in an alms/games/edit request to appCore/index.php...

Folder Plus 2.5.1 iOS - Persistent Cross-Site Scripting

Folder Plus 2.5.1 iOS - Persistent Cross-Site Scripting Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability...

Folder Plus 2.5.1 iOS - Persistent Cross-Site Scripting

Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 134...

Folder Plus v2.5.1 iOS - Persistent Item Vulnerability

Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 134...

CVE-2014-6970

The North American Ismaili Games aka hr.apps.n166983741 application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6970

The North American Ismaili Games aka hr.apps.n166983741 application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6970

The CVE-2014-6970 entry affects the Android app North American Ismaili Games (5.26.2). The connected documents state that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and harvest sensitive information through crafted ce...

CVE-2014-7021

The CVE-2014-7021 entry concerns the Android app Sense: The Leg Surgery - Kids Games (com.harriskerioe.legsurgery) version 1.0.2 that fails to verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

iOS 8 'Date Trick' Loophole Allows Play Nintendo Games Using Emulators

If you are a retro games lover and want to play it on your iPhone, a security loop in iOS 8 makes it possible for you to play classic SNES games on your iPhone, without the need to jailbreak your Apple devices. Since Apple doesn’t allow emulators on the App Store for copyright reasons, making it...

CVE-2014-5941

The Armpit Spa & Girl Games aka com.freegames.spamakeover application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5941

CVE-2014-5941 affects the Android app Armpit Spa & Girl Games (com.freegames.spamakeover) version 1.0.2. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerab...

CVE-2014-5763

The Kid Mode: Free Games + Lock aka com.zoodles.kidmode application 4.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5708

The Best Racing/moto Games Ranking aka com.subapp.android.racing application 2.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5700

The Brain lab – brain age games IQ (com.sixdead.brainlab) Android app version 2.37 is affected by CVE-2014-5700 due to failing to verify X.509 certificates when connecting to SSL servers. The underlying issue allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive info...

CVE-2014-5838

The CVE-2014-5838 entry concerns The Girls Games - Shoes Maker (com.g6677.android.shoemaker) on Android, version 1.0.1, which does not verify X.509 certificates from SSL servers. This lax TLS handling allows MITM attackers to spoof servers and potentially obtain sensitive information via a crafte...