20 matches found
CVE-2025-65229
A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...
EUVD-2025-201808
A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...
CVE-2025-65229
A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...
CVE-2025-65229
A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...
CVE-2025-65229
A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...
CVE-2025-65229
A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server versions 9.0.3 and earlier . The issue is caused by a lack of proper output encoding when the server renders the Player name field from the Settings Player menu. An authenticated user can inject a...
CVE-2025-65229
A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...
PT-2025-49593
Name of the Vulnerable Software and Affected Versions Lyrion Music Server versions prior to 9.0.4 Description A stored cross-site scripting XSS issue exists in the web interface. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. This...
EUVD-2005-3592
Malware in sbrugna...
SUSE CVE-2006-1744
Buffer overflow in plmain.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call...
S.T.A.L.K.E.R. game server DoS
Crash on player name longer than 64 characters...
Sparklet game format string vulnerabilitity
Format string vulnerability on player name displaying...
Buffer overflow
Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via 1 the raydiumlog function in log.c or 2 the raydiumconsolelineadd function in console.c, possibly from a long player name...
CVE-2006-2408
Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via 1 the raydiumlog function in log.c or 2 the raydiumconsolelineadd function in console.c, possibly from a long player name...
CVE-2006-1744
Buffer overflow in plmain.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call...
DEBIAN-CVE-2006-1744
Buffer overflow in plmain.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call...
CVE-2005-3594
gamescore.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $playername, $playerscore, and $gamename variables...
CVE-2005-3485
Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a glplayerEnter command with a long player name...