Guild Wars 2 - Insecure Folder Permissions

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...

Guild Wars 2 Insecure Folder Permissions

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...

GHSA-4VR3-9V7H-5F8V Low severity vulnerability that affects Gw2Sharp

Leaking cached authenticated requests Impact If you've been using one MemoryCacheMethod object in multiple instances of Gw2WebApiClient and are requesting authenticated endpoints with different access tokens, then you are likely to run into this bug. When using an instance of MemoryCacheMethod an...

audacityguild.net XSS vulnerability

Open Bug Bounty ID: OBB-631671 Description| Value ---|--- Affected Website:| audacityguild.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

texascustombuildersguild.com XSS vulnerability

Open Bug Bounty ID: OBB-526216 Description| Value ---|--- Affected Website:| texascustombuildersguild.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

underworldknights.guildlaunch.com XSS vulnerability

Vulnerable URL: http://underworldknights.guildlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

datenight.guildlaunch.com XSS vulnerability

Vulnerable URL: http://datenight.guildlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:44 GMT Vulnerability type:| XSS Vulnerability status:|...

Guild of Honor - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guild of Honor published at the 'play' market has multiple vulnerabilities...

Clash for Dawn: Guild War - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Clash for Dawn: Guild War published at the 'play' market has multiple vulnerabilities...

Sony PlayStation Network Taken Down By DDoS Attack

It’s been a bad weekend for Sony Playstation. The entire PlayStation Network was down much of the day after a dedicated distributed denial-of-service DDoS attack by online attackers, which left the network inaccessible to users. It's possible that EVE Online and Guild Wars 2 have also been hit by...

DrPhibez and Nitro187 Guild FTPD 0.9.7 File Existence Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1452/info Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messages it is able to determine if the...

Guild FTPd 0.999.8.11/0.999.14 Heap Corruption

Guild FTPd 0.999.8.11 and 0.999.14 are vulnerable to heap corruption. You need to have a valid login so you can run CWD and LIST. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Guild FTPd...

INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities

INFIGO IS Security Advisory ADV-2006-05-03 http://www.infigo.hr/ Title: Multiple FTP Servers vulnerabilities Advisory ID: INFIGO-2006-05-03 Date: 2006-05-05 Advisory URL: http://www.infigo.hr/hr/infocus/advisories/INFIGO-2006-05-03 Impact: Remote code execution and DoS Risk Level: High...

CVE-2000-0640

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. dot dot attack, which provides different error messages depending on whether the file exists or not...

CVE-2000-0640

CVE-2000-0640 affects Guild FTPd and describes a path traversal vulnerability where an attacker can use dot-dot sequences to determine whether files exist outside the FTP root. The issue arises because the server returns different error messages based on file existence, enabling remote discovery ...

CVE-2000-0640

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. dot dot attack, which provides different error messages depending on whether the file exists or not...

DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure

DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure source: https://www.securityfocus.com/bid/1452/info Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messag...

DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure

source: https://www.securityfocus.com/bid/1452/info Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messages it is able to determine if the file requested exists. The error...