Lucene search
+L

661 matches found

Positive Technologies
Positive Technologies
•added 2022/03/20 12:00 a.m.•13 views

PT-2022-16479 · Fromsoftware · Dark Souls Iii

Name of the Vulnerable Software and Affected Versions: Dark Souls III versions through 2022-03-19 Description: The matchmaking servers allow remote attackers to send arbitrary push requests to clients via a "RequestSendMessageToPlayers" request. This issue is restricted on the client side and can...

8.8CVSS8.4AI score0.02675EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2022/03/20 12:00 a.m.•13 views

Bandai Namco FromSoftware Dark Souls III 解析器缓冲区错误漏洞

Bandai Namco FromSoftware Dark Souls III is an action role-playing game by FromSoftware Japan. A security vulnerability in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via the matchmaking server...

9.8CVSS9AI score0.04694EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2022/03/19 11:54 p.m.•41 views

CVE-2022-24126

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170...

10AI score0.04694EPSS
SaveExploits2References2
CVE
CVE
•added 2022/03/19 11:54 p.m.•126 views

CVE-2022-24126

CVE-2022-24126 describes a buffer overflow in the NRSessionSearchResult parser used by Bandai Namco FromSoftware’s Dark Souls III. The vulnerability arises from unsafe handling of a stack-allocated DLMemoryInputStream and a size/buffer parsing path within the NRSSR parsing flow, enabling an attac...

9.8CVSS9.9AI score0.04694EPSS
SaveExploits2References2Affected Software1
GithubExploit
GithubExploit
•added 2022/01/28 8:37 p.m.•189 views

Exploit for CVE-2022-24125

Update: Dark Souls III 1.15.1 A new game update, 1.15.1, has b...

9.8CVSS9.3AI score0.04694EPSS
SaveExploits3
Github Security Blog
Github Security Blog
•added 2021/12/10 8:20 p.m.•32 views

Cross Site Request Forgery in firefly-iii

firefly-iii is vulnerable to a Cross-Site Request Forgery CSRF attack which can disable two factor authentication for the target user...

4.3CVSS3.2AI score0.00443EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2021/12/07 12:00 a.m.•18 views

firefly-iii Cross-Site Request Forgery Vulnerability

firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

4.3CVSS6.7AI score0.00443EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/06 5:19 p.m.•57 views

GHSA-G6VQ-WC8W-4G69 firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4.5AI score0.00443EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2021/12/06 5:19 p.m.•33 views

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4AI score0.00443EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2021/12/04 12:15 p.m.•12 views

CVE-2021-4005

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.4AI score0.00443EPSS
SaveExploits1References3
OSV
OSV
•added 2021/12/04 12:15 p.m.•17 views

CVE-2021-4005

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS7AI score
SaveExploits0References2
NVD
NVD
•added 2021/12/04 12:15 p.m.•20 views

CVE-2021-4005

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS0.00443EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/04 12:15 p.m.•18 views

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4.7AI score0.00443EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/12/04 12:00 p.m.•25 views

CVE-2021-4005 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5AI score0.00443EPSS
SaveExploits1References2
CVE
CVE
•added 2021/12/04 12:00 p.m.•86 views

CVE-2021-4005

CVE-2021-4005 affects the Firefly-III project and is a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected records (OSV, GHSA, Red Hat, CNVD, CNVD-CNVD, CNVD-202112-206) describe firefly-iii as vulnerable to CSRF; OSV notes that the CSRF could disable two-factor authentication for...

4.3CVSS4.5AI score0.00443EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2021/12/02 9:10 a.m.•25 views

Cross-site Request Forgery (CSRF)

grumpydictator/firefly-iii is vulnerable to cross-site request forgery. The vulnerability is capable of tricking users to switch transaction links and unknowingly perform unwanted actions on malicious websites...

4.3CVSS4.7AI score0.00443EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2021/12/01 11:15 a.m.•31 views

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS0.00443EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/01 11:15 a.m.•14 views

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/01 11:15 a.m.•10 views

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.4AI score0.00443EPSS
SaveExploits1References3
Prion
Prion
•added 2021/12/01 11:15 a.m.•19 views

Cross site request forgery (csrf)

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS4.7AI score0.00443EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder