371 matches found
collateral-damage
Danni Collaterali Danni Collaterali è un exploit per il kernel di Xbox SystemOS che sfrutta CVE-2024-30088. Prende di mira console Xbox One e Xbox Series con versioni del kernel 25398.4478, 25398.4908 e 25398.4909. Il punto di ingresso iniziale è tramite l'applicazione UWP Game Script. I payload...
XboxSeries
Xbox Series: Ricerca sull'Architettura Interna Campo| Valore ---|--- Data| 9-12 marzo 2026 + 7-? luglio 2026 Hardware| Xbox Series S Nome in codice: Lockhart Build del sistema operativo| 26100.7010.amd64fre.xbflt2602ge.260212-1010 + 26100.8561.amd64fre.xbflt2606ge.260609-2200 Metodo di accesso|...
CVE-2026-78455
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-78455
CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...
EUVD-2026-73806
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
EUVD-2026-73368
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-58611
CVE-2026-58611 is an improper authorization vulnerability in Xbox Gaming Services that allows an already-authorized (low-privilege) attacker to elevate privileges locally , resulting in high impact to confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with a l...
Xbox Information Disclosure Vulnerability
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
Xbox Gaming Services Elevation of Privilege Vulnerability
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-58611: Improper Authorization
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-78455: Out-of-bounds Read
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...
PT-2026-87201
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
KLA91262 PE vulnerabilities in Microsoft Apps
Privilege escalation vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Xbox Gaming Services can be exploited remotely to gain privileges. 2...
PT-2026-87999
🚨 CVE-2026-78455 Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. 🎖@cveNotify...
CVE-2022-51016 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
CVE-2022-51016: Authentication Bypass by Capture-replay
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
PT-2026-86778
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
Malicious Package
Overview xbox-promo-checker-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...