Lucene search
+L

12 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/06/30 9:07 a.m.•20 views

RPG MAKER MV and MZ vulnerable to OS command injection

Overview RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. are game development tools, which provide "save data" facility to create a file to preserve game status and related parameters. A user can save the current game status to a save-file, and later load the file to resume playing the...

8.4CVSS7.5AI score0.01086EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/30 7:16 a.m.•36 views

CVE-2026-56137

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS0.01086EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/30 6:02 a.m.•25 views

EUVD-2026-40256

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS5.9AI score0.01086EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/30 6:02 a.m.•13 views

CVE-2026-56137

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS7.2AI score0.01086EPSS
SaveExploits0References4Affected Software2
Vulnrichment
Vulnrichment
•added 2026/06/30 6:02 a.m.•12 views

CVE-2026-56137

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS7.4AI score0.01086EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/30 6:02 a.m.•52 views

CVE-2026-56137

RPG MAKER MV and MZ (Gotcha Gotcha Games Inc.) have an OS command injection vulnerability. When a user loads a specially crafted save-file, arbitrary OS commands may be executed. Affected components and root cause are stated as OS command injection, with high impact (CVE-2026-56137). The supplied...

8.4CVSS7.4AI score0.01086EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/30 6:02 a.m.•56 views

CVE-2026-56137

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS0.01086EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•3 views

CVE-2026-56137: Improper Neutralization of Special Elements used in an OS Command

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS7.4AI score0.01086EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•30 views

PT-2026-53820

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed...

8.4CVSS7.2AI score0.01086EPSS
SaveExploits0References4
Securelist
Securelist
•added 2026/06/03 9:00 a.m.•83 views

Argamal: Malware hidden in hentai games

In April 2026, we discovered a new malware campaign targeting players of "hentai" games. Once launched, the infected games install a previously unknown malicious implant on the user's machine. After a few days, the implant downloads and executes a Trojan, resulting in full system compromise and...

6.1AI score
SaveExploits0
Fedora
Fedora
•added 2026/03/13 1:19 a.m.•22 views

[SECURITY] Fedora 43 Update: easyrpg-player-0.8.1.1-4.fc43

EasyRPG Player is a game interpreter for RPG Maker 2000/2003 and EasyRPG game s. To play a game, run the "easyrpg-player" executable inside a RPG Maker 2000/2003 game project folder same place as RPGRT.exe...

7.8CVSS5.9AI score0.00238EPSS
SaveExploits1
Packet Storm News
Packet Storm News
•added 2025/08/19 12:00 a.m.•9 views

liblcf 0.8.1 Denial of Service

lcf2xml part of liblcf aborts when parsing specially crafted RPG Maker 2000/2003 files that supply a negative element count for vectors of structured records. Version 0.8.1 is affected...

6.9AI score
SaveExploits0
Rows per page
Query Builder