CVE-2014-5708

The Best Racing/moto Games Ranking aka com.subapp.android.racing application 2.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The RE-VOLT 2 : Best RC 3D Racing aka com.wego.revolt2global application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5708

The Best Racing/moto Games Ranking aka com.subapp.android.racing application 2.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5715

CVE-2014-5715 affects the Android app Street Racing (com.tgb.streetracing.lite5pp) version 4.0.4, where SSL/TLS connections do not verify X.509 certificates. This public detail states that such a flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

CVE-2014-5715

The Street Racing aka com.tgb.streetracing.lite5pp application 4.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5719

The CVE concerns the BIKE RACING 2014 Android app (com.timuzsolutions.bikeracing2014) version 1.6, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attacks to spoof servers and access sensitive data via a crafted certificate. The connected records confirm ...

CVE-2014-5719

The BIKE RACING 2014 aka com.timuzsolutions.bikeracing2014 application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5743

CVE-2014-5743 affects the Android app RE-VOLT 2: Best RC 3D Racing (com.wego.revolt2_global) version 1.2.6. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate....

CVE-2014-5743

The RE-VOLT 2 : Best RC 3D Racing aka com.wego.revolt2global application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2012-1189

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator TORCS before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file...

Northern Racing SQL Injection

========================================================================== Exploit Title: Northern Racing SQL Injection Vulnerability Date: 18.10.2011 Author: poach3r Software Link: http://www.northernracing.co.uk/ Tested on: Windows XP SP3 Google Dork: intext:Northern Racing Ltd...

X-Motor Racing 1.26 - Remote Buffer Overflow / Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/40008/info X-Motor Racing is prone to a buffer-overflow vulnerability and a multiple denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code or crash the affected application, denying servi...

Toney Jennings on Application Whitelisting, the History of the IDS and Racing Ferraris

Dennis Fisher talks with Toney Jennings, CEO of Core Trace, about the history of the commercial IDS, the changes to the security industry in the last 15 years, the advantages of application white listing and the rush of racing a $300,000 Ferrari. Download Subscribe to the Digital Underground...

Unfixed XSS vulnerability at www.twenteracingscene.com

Security researcher CCC, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.twenteracingscene.com, which at the time of submission ranked 371295 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...

Unfixed XSS vulnerability at gallery.chicagoindoorracing.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting gallery.chicagoindoorracing.com, which at the time of submission ranked 1818185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Live for Speed car racing game multiple security vulnerabilities

Multiple buffer overflows and DoS conditions...

lfs-overflow.txt

/ 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to execute shell code on the user's...

Live for Speed S1S2Demo - .mpr replay Local Buffer Overflow

Live for Speed S1S2Demo - .mpr replay Local Buffer Overflow / 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over...

CVE-2007-1170

SimBin GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier allow remote attackers to cause a denial of service client disconnection via an empty UDP packet to the server port...

CVE-2007-1170

The CVE-2007-1170 entry affects SimBin games: GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier. The underlying issue is a remote attacker sending an empty UDP packet to the server port, causing a denial o...