Steam Software - Denial of Service

Steam Software - Denial of Service Exploit Title: Steam Cloud Denial of Service 0day Date: 06042011 Author: david.r.klein \x0agmail\x0acom Software Link: http://steampowered.com Version: Steam - Latest Tested on: Windows XP/2003, Windows7 CVE : NA Notes: Copy file to C:\Program...

Steam Software - Denial of Service

Exploit Title: Steam Cloud Denial of Service 0day Date: 06042011 Author: david.r.klein \x0agmail\x0acom Software Link: http://steampowered.com Version: Steam - Latest Tested on: Windows XP/2003, Windows7 CVE : NA Notes: Copy file to C:\Program Files\Steam\userdata\remote\sharedconfig.vdf Run...

SourceBans Version 1.4.7 XSS

Exploit Title: SourceBans Version 1.4.7 XSS Google Dork: inurl:"sourcebans/index.php?p=submit" Date: Feb. 9th 2011 Author: Sw1tCh Software Link: http://www.sourcebans.net/ Version: 1.4.7 Info: SourceBans is an application for managing publicly the banned users for a Steam Server. -= The Advisory ...

SourceBans 1.4.7 - Cross-Site Scripting

SourceBans 1.4.7 - Cross-Site Scripting Exploit Title: SourceBans Version 1.4.7 XSS Google Dork: inurl:"sourcebans/index.php?p=submit" Date: Feb. 9th 2011 Author: Sw1tCh Software Link: http://www.sourcebans.net/ Version: 1.4.7 Info: SourceBans is an application for managing publicly the banned...

SourceBans 1.4.7 - Cross-Site Scripting

Exploit Title: SourceBans Version 1.4.7 XSS Google Dork: inurl:"sourcebans/index.php?p=submit" Date: Feb. 9th 2011 Author: Sw1tCh Software Link: http://www.sourcebans.net/ Version: 1.4.7 Info: SourceBans is an application for managing publicly the banned users for a Steam Server. -= The Advisory ...

Steam v.54/894 Local Privilege Escalation Vulnerability

No description provided by source. Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest. Special...

Steam Local Privilege Escalation

Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest. Special Thanks: Jeremy Brown and...

Steam v.54/894 Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits ======================================================= Steam v.54/894 Local Privilege Escalation Vulnerability ======================================================= Steam Multiple .exe's Local Privilage Escalation By: MrDoug Version Info:...

Steam 54894 - Local Privilege Escalation

Steam 54894 - Local Privilege Escalation Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest...

Steam 54/894 - Local Privilege Escalation

Steam Multiple .exe's Local Privilage Escalation By: MrDoug mrdoug13atgmaildotcom Version Info: Steam windows client Built: Jun 30 2009, at 13:29:32 Steam API: v008 Steam Package versions: 54/894 Greetz: Slappywag, Doomchip, Bolo, Eliwood, and the rest. Special Thanks: Jeremy Brown and...

Valve Steam crossite scripting

Crossite scripting with steam://publisher/ URL...

[Full-disclosure] STEAM (Valve) - Phishing and Cross-site Scripting in internal browser

=========================================== = APP: STEAM - Valve Software = =========================================== - STEAM http://www.steampowered.com - Valve Software http://www.valvesoftware.com - Vulnerability Discovery: Gabriel Lima gabriel at falandodeseguranca.com -...

Steam Cross Site Scripting

STEAM - Phishing and Cross-site Scripting =========================================== = APP: STEAM - Valve Software = =========================================== - STEAM - Valve Software - Vulnerability Discovery: Gabriel Lima - http://www.falandodeseguranca.com in portuguese...

halflife-dos.txt

---- Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru Counter Strike 1.6 Denial Of Service POC Eugene Minaev [email protected] Bug was found by Maxim Suhanov THE FUF works only with no-steam servers / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ /...

Half-Life CSTRIKE Server 1.6 Denial of Service Exploit (no-steam)

No description provided by source. ---- Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru Counter Strike 1.6 Denial Of Service POC Eugene Minaev [email protected] Bug was found by Maxim Suhanov THE FUF works only with no-steam servers / \ \ \ / .\ / /// // / \ / \ // / /...

Half-Life CSTRIKE Server 1.6 Denial of Service Exploit (no-steam)

Exploit for multiple platform in category dos / poc ================================================================= Half-Life CSTRIKE Server 1.6 Denial of Service Exploit no-steam ================================================================= ---- Counter Strike 1.6 Denial Of Service POC...

Half-Life CSTRIKE Server 1.6 - 'no-steam' Denial of Service

---- Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru Counter Strike 1.6 Denial Of Service POC Eugene Minaev [email protected] Bug was found by Maxim Suhanov THE FUF works only with no-steam servers / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ /...

Half-Life CSTRIKE Server <= 1.6 (non steam) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================================== Half-Life CSTRIKE Server " unless $ARGV0; $host=$ARGV0; if fork econnect$host; else econnect$host; ; exit; sub econnect$ my $host=$0; my $sock = new...

Half-Life CSTRIKE Server 1.6 (Non Steam) - Denial of Service

Half-Life CSTRIKE Server 1.6 Non Steam - Denial of Service !/usr/bin/perl Server must not be running steam. /str0ke Half-Life engine remote DoS exploit bug found by Firestorm tested against cstrike 1.6 Windows build-in server, cstrike 1.6 linux dedicated server use IO::Socket; die "usage: ./csdos...

Authentication bypass via attacker provided openid server

Description Impact The outdated version 1 of the Steam Socialite Provider doesn't check properly if the login comes from steamcommunity.com, allowing a malicious actor to substitute their own openID server. Patches This vulnerability only affects the outdated v1.x versions of the package. These a...