148 matches found
GOG Galaxy 安全漏洞
GOG Galaxy is a game client program from the Polish company GOG. The program is used to install, launch and update games. A security vulnerability exists in GOG Galaxy versions 2.0.67.2 through 2.0.71.2, which originates from a vulnerability that allows an authenticated user to overwrite and...
CVE-2023-50915
CVE-2023-50915 affects GOG Galaxy (Beta) 2.0.67.2–2.0.71.2. The issue exists in GalaxyClientService.exe and could allow an authenticated user to overwrite and corrupt critical system files by abusing a combination of an NTFS Junction and an RPC Object Manager symbolic link, potentially leading to...
CVE-2023-50914
A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...
CVE-2023-50914
CVE-2023-50914 is a local privilege escalation in GOG Galaxy (Beta) IPC between GalaxyClient.exe and GalaxyClientService.exe. From 2.0.67.2 through 2.0.71.2, an authenticated user can forge IPC packets via FixDirectoryPrivileges, altering the DACL of arbitrary system directories to grant Everyone...
PT-2024-14007 · Gog · Gog Galaxy
Name of the Vulnerable Software and Affected Versions: GOG Galaxy Beta versions 2.0.67.2 through 2.0.71.2 Description: An issue exists in GalaxyClientService.exe that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC...
PT-2024-14006 · Gog · Gog Galaxy
Name of the Vulnerable Software and Affected Versions: GOG Galaxy Beta versions 2.0.67.2 through 2.0.71.2 Description: A Privilege Escalation issue in the inter-process communication procedure allows authenticated users to change the DACL of arbitrary system directories to include Everyone full...
Exploit for Use of Hard-coded Credentials in Gog Galaxy
GOG Galaxy - Research Artifacts Repository Structure This...
Malicious code in gog-module-event-bus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fb2c212daa3b898b2df5ffdf458a7751515e92268bd6b3b13ac45894235be3c The OpenSSF Package Analysis project identified 'gog-module-event-bus' @ 1.0.1 npm as malicious. It is considered malicious because: - The packa...
MAL-2023-8616 Malicious code in gog-module-event-bus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fb2c212daa3b898b2df5ffdf458a7751515e92268bd6b3b13ac45894235be3c The OpenSSF Package Analysis project identified 'gog-module-event-bus' @ 1.0.1 npm as malicious. It is considered malicious because: - The packa...
gog-quizzes.app.do Cross Site Scripting vulnerability OBB-3765260
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
gog-eyewear.com Cross Site Scripting vulnerability OBB-3145601
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-31262
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as...
CVE-2022-31262
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as...
CVE-2022-31262
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as...
Privilege escalation
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as...
CVE-2022-31262
CVE-2022-31262 affects GOG Galaxy 2.0.46, with local privilege escalation due to insufficient folder permissions in %ProgramData%\GOG.com that allow hijacking the GalaxyCommunication service executable and achieving code execution as SYSTEM. Connected sources corroborate vulnerable versions 2.0.4...
CVE-2022-31262
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as...
Exploit for Improper Preservation of Permissions in Gog Galaxy
CVE-2022-31262 GOG Galaxy 2.X LPE Exploit CVE-2022-31262htt...
CVE-2020-24574
The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...
Privilege escalation
The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...