Insecure Temporary File Handling

lz4-java is vulnerable to Insecure Temporary File Handling. The vulnerability is due to the way net.jpountz.util.Native.load extracts the native library: it creates a lock file with File.createTempFile and then derives the library path by stripping the .lck suffix, opening the resulting file with...

Security Bypass Vulnerabilities in Multiple Game Engine Products

ioquake3 and others are open source, free, cross-platform Quake 3-based FPS game engines. A security vulnerability exists in the auto-downloading feature in several game engine products, which stems from the program's failure to adequately restrict content. An attacker can exploit the vulnerabili...