PT-2023-12531

Name of the Vulnerable Software and Affected Versions WP-Backgrounds Lite plugin for WordPress versions up to and including 2.3 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ino save data function. This allows unauthenticated...

WordPress Plugin SMTP Mail Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-3092: Improper Neutralization of Input During Web Page Generation

The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.3.46 due to insufficient input sanitization and output escaping when the 'Save Data SendMail' feature is enabled. This makes it possible for unauthenticated...

PT-2022-19920

Name of the Vulnerable Software and Affected Versions USU Oracle Optimization versions prior to 5.17 Description The issue allows authenticated quantum users to achieve remote code execution due to Java deserialization in the "/v2/quantum/save-data-upload-big-file" API endpoint. This is...

CVE-2022-29936: Deserialization of Untrusted Data

USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product...

UBUNTU-CVE-2020-14938

An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow...

A brief history of video game saves and data modification

Games consoles and handhelds have always been an interesting battleground for hacking activities. The homebrew scene for using hardware in interesting ways has a long and varied history, especially where porting games to run on different platforms is concerned. Tampering with games while playing...

PT-2017-4142

Name of the Vulnerable Software and Affected Versions libexif versions 0.6.21 and earlier Description The issue is related to an out-of-bounds heap read in the exif data save data entry function in libexif/exif-data.c, caused by improper length computation of the allocated data of an ExifMnote...

Multiple TYPE-MOON games vulnerable to OS command injection

Overview Multiple games provided by TYPE-MOON contain an OS command injection vulnerability CWE-78 due to an issue in loading save data. KUSANO Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When...

JVN#80144272: Multiple TYPE-MOON games vulnerable to OS command injection

Multiple games provided by TYPE-MOON contain an OS command injection vulnerability CWE-78 due to an issue in loading save data. Impact When specially crafted save data is loaded, an arbitrary OS command may be executed. Solution Apply a Workaround The following workaround can mitigate the affects...

CVE-2015-2991

Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data...

CVE-2015-2991

Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data...

CVE-2015-2991: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data...

NScripter vulnerable to buffer overflow

Overview NScripter is a script engine to build and execute games. NScripter contains a buffer overflow vulnerability due to a flaw in processing save data. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#08494613: NScripter vulnerable to buffer overflow

NScripter is a script engine to build and execute games. NScripter contains a buffer overflow vulnerability due to a flaw in processing save data. Impact By processing a specially crafted save data, arbitrary code may be executed. Solution For developers using NScripter: Update and Rebuild the Ga...

qemu: insufficient parameter validation during ram load

It was found that certain values that were read when loading RAM during migration were not validated. A user able to alter the savevm data either on the disk or over the wire during migration could use either of these flaws to corrupt QEMU process memory on the destination host, which could...

DEBIAN-CVE-2014-7840

The hostfromstreamoffset function in archinit.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted 1 offset or 2 length value in savevm data...

Havij 1.10 Cross Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Software Link: http://itsecteam.com/files/Havij%201.10.rar Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By :...

Havij 1.10 - Persistent Cross-Site Scripting

Havij 1.10 - Persistent Cross-Site Scripting Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon...