242 matches found
CVE-2026-107692
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
CVE-2026-107692 War Thunder Account Impersonation
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
CVE-2026-107692
The War Thunder game client is vulnerable to an account impersonation flaw because it transmits its authentication bearer token (auth_jwt) in the first data packet after the TCP handshake using only LZ4 compression without encryption. A network-positioned attacker can passively intercept and deco...
EUVD-2026-105305
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
CVE-2026-107692 War Thunder Account Impersonation
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
PT-2026-118622
Name of the Vulnerable Software and Affected Versions War Thunder affected versions not specified Description The game client transmits the auth jwt authentication bearer token in the initial data packet following the TCP handshake. This transmission uses LZ4 compression—a lossless data compressi...
Gaijin Entertainment War Thunder encryption issue vulnerability
Versions of War Thunder from Gaijin Entertainment ranging from 2.57.1.140 up to but not including 2.59.0.9 contain an encryption vulnerability. This vulnerability arises because the game client transmits authentication tokens authjwt via LZ4 compression only, without encrypting them in the first...
War Thunder 2.57.1.140 Cleartext JWT Transmission
War Thunder version 2.57.1.140 transmits the authjwt bearer token in cleartext during its initial matching-server handshake. A passive observer can decompress the packet and recover the token, allowing temporary authenticated impersonation and access to game services and readable user data...
Exploit for CVE-2026-107692
Unencrypted JWT Transmission in War Thunder's Initial Client-S...
Malicious code in lichen-x02p7-gha4x-thunder-project (npm)
The package lichen-x02p7-gha4x-thunder-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lagoon-thunder-top089-project (npm)
The package lagoon-thunder-top089-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jungle-thunder-fko445-project (npm)
The package jungle-thunder-fko445-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in grove-o6s45-ig67e-thunder-project (npm)
The package grove-o6s45-ig67e-thunder-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in fable-bmpfz-eqd5r-thunder-project (npm)
The package fable-bmpfz-eqd5r-thunder-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in thunder-rony (npm)
Source: amazon-inspector b49da9c4d3522da30e4c917c3102444f9d61d3ab3e9c547b74b9240168754b9a On npm install, the package's postinstall hook executes index.js, which collects the installer's OS username os.userInfo.username, hostname os.hostname, non-internal IPv4 address from os.networkInterfaces, a...
Malicious code in thunder-rony (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49da9c4d3522da30e4c917c3102444f9d61d3ab3e9c547b74b9240168754b9a On npm install, the package's postinstall hook executes index.js, which collects the installer's OS username os.userInfo.username, hostname...
MAL-2026-7004 Malicious code in thunder-rony (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49da9c4d3522da30e4c917c3102444f9d61d3ab3e9c547b74b9240168754b9a On npm install, the package's postinstall hook executes index.js, which collects the installer's OS username os.userInfo.username, hostname...
MiracleLinux 4 : libtiff-3.9.4-1.AXS4.2 (AXSA:2011-126:02)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-126:02 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for...
Iranian APT ‘Prince of Persia’ Resurfaces With New Tools and Targets
SafeBreach reports the resurgence of the Iranian APT group Prince of Persia Infy. Discover how these state-sponsored hackers are now using Telegram bots and Thunder and Lightning malware to target victims globally across Europe, India, and Canada...