CVE-2025-34124

CVE-2025-34124 affects Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0. Description: a buffer overflow during in-game map loading is triggered by crafted .h3m map files through object sprite name parsing, potentially enabling arbitrary code execution. Exploi...

Ubisoft Entertainment多款产品 安全漏洞

Ubisoft Entertainment Heroes of Might and Magic III Complete, among others, is a turn-based strategy magic game by French company Ubisoft Entertainment. A security vulnerability exists in various Ubisoft Entertainment products, which originates from a buffer overflow that could lead to the...

PT-2025-29886 · Unknown · Heroes Of Might/Magic Iii Complete +2

Name of the Vulnerable Software and Affected Versions: Heroes of Might and Magic III Complete versions 4.0.0.0 Heroes of Might and Magic III HD Mod versions 3.808 build 9 Heroes of Might and Magic III Demo version 1.0.0.0 Description: A buffer overflow vulnerability exists due to malicious .h3m m...

athletic-heroes.com Cross Site Scripting vulnerability OBB-3909252

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

indigenousheroes.ca Cross Site Scripting vulnerability OBB-3307762

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

restorationheroes.co Cross Site Scripting vulnerability OBB-2707571

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Want better apps? You need a (agile security) hero!

If weve learned anything from the rise of Marvel Cinematic Universe, its that good things tend to happen when heroes intervene. For securing new applications, this metaphor is a useful one because security isnt always top-of-mind for scrum teams, nor is it always conducive to meeting aggressive...

Heroes Charge - Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Heroes Charge published at the 'play' market has multiple vulnerabilities...

Celtic Heroes - 3D MMORPG - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Celtic Heroes - 3D MMORPG published at the 'play' market has multiple vulnerabilities...

AWS Public Sector Summit 2017: Cloud Super Powers and Security

Coalfire recently returned from the Amazon Web Services AWS Public Sector Summit, held in Washington, D.C., which addresses some of the most pressing issues todays leaders face around security, governance and compliance, and more. While Coalfire has attended the show in the past, we were especial...

Heroes Tactics: Strategy PvP - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Heroes Tactics: Strategy PvP published at the 'play' market has multiple vulnerabilities...

Bit Heroes - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Bit Heroes published at the 'play' market has multiple vulnerabilities...

Idle Heroes - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Idle Heroes published at the 'play' market has multiple vulnerabilities...

Legion of Heroes - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Legion of Heroes published at the 'play' market has multiple vulnerabilities...

Shop Heroes - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Shop Heroes published at the 'play' market has multiple vulnerabilities...

PJ Masks: Moonlight Heroes - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PJ Masks: Moonlight Heroes published at the 'play' market has multiple vulnerabilities...

Star Wars™: Galaxy of Heroes - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Star Wars™: Galaxy of Heroes published at the 'play' market has multiple vulnerabilities...

Independence Day Battle Heroes - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Independence Day Battle Heroes published at the 'play' market has multiple vulnerabilities...

Hearthstone Heroes of Warcraft - BSD license, Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearthstone Heroes of Warcraft published at the 'play' market has multiple vulnerabilities...

Elemental Heroes - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elemental Heroes published at the 'play' market has multiple vulnerabilities...