CVE-2025-61582

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A Denial of Dervice vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability permits an unauthenticated actor to crash the application through the submission of specially crafted Unicode input,...

CVE-2025-61582

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A Denial of Dervice vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability permits an unauthenticated actor to crash the application through the submission of specially crafted Unicode input,...

CVE-2025-61582 Ts3 Manager: Unauthenticated Denial of Service possible through specially crafted Unicode input

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A Denial of Dervice vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability permits an unauthenticated actor to crash the application through the submission of specially crafted Unicode input,...

CVE-2025-58447

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

CVE-2025-58447

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

CVE-2025-58447 rAthena has heap-based buffer overflow in login server

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

CVE-2025-58447

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted "CASSOLOGINREQ" with an oversize...

CVE-2025-58447 rAthena has heap-based buffer overflow in login server

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

CVE-2025-58447

CVE-2025-58447 affects rAthena open-source MMORPG server prior to commit 2f5248b. The login server contains a heap-based buffer overflow triggered by a crafted CA_SSO_LOGIN_REQ with an oversized token length, allowing denial of service (crash) and potentially remote code execution via heap corrup...

CVE-2025-58447 rAthena has heap-based buffer overflow in login server

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

CVE-2025-58447: Heap-based Buffer Overflow

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

PT-2025-36991

Name of the Vulnerable Software and Affected Versions: rAthena versions prior to commit 2f5248b Description: rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. A heap-based buffer overflow exists in the login server. Sending a crafted CA SSO LOG...

rAthena security vulnerabilities

rAthena is a cross-platform MMORPG server open-sourced by rAthena. A security vulnerability exists in versions prior to rAthena 2f5248b, which stems from a login server heap buffer overflow that could lead to a denial of service and remote code execution...

CVE-2018-13791: Incorrect Permission Assignment for Critical Resource

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter...

PT-2018-12188

Name of the Vulnerable Software and Affected Versions ABBYY FlexiCapture versions prior to 12 Release 1 Update 7 Description The issue concerns the HTTP API, which allows an attacker to conduct Access Control attacks. This is achieved via the "/FlexiCapture12/Login/Server/SevaUserProfile" API...

PT-2017-8327

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions prior to v236 UAA versions prior to v3.3.0 UAA versions prior to v10 Login-server all versions Pivotal Elastic Runtime versions prior to 1.7.2 Description The UAA reset password flow is vulnerable to a brute force attack...

CVE-2016-0781: Improper Neutralization of Input During Web Page Generation

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions prior to 1.6.20 are vulnerable to an XSS attack by specifying malicious java script content in eith...

PT-2017-7660

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions 208 through 231 Login-server versions 1.6 through 1.14 UAA versions 2.0.0 through 2.7.4.1 UAA versions 3.0.0 through 3.2.0 UAA-Release versions 2 through 7 Pivotal Elastic Runtime versions prior to 1.6.20 Description The...

CVE-2016-3084: Undefined Security Weakness

The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple...

CVE-2016-3664

Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in-the-middle attackers to spoof this server and obtain sensitive information via a crafted certificate...