← 返回地图破甲

浏览报告

仅含 CVE

82 份报告 · 本页赏金 $44,800 · 清除筛选

Web API key registration allows registering multiple keys by reusing `request_id`信息泄露Valve低危—2023-12-12 Steam Deck Single Click Root Remote Code Execution代码执行Valve中危$7502023-08-01 Modify in-flight data to payment provider Smart2Pay业务逻辑Valve高危$7,5002021-08-10 Buffer overrun in Steam SILK voice decoder内存破坏Valve高危$7,5002021-09-13 https://srcds.valve.net/find/ is leaking server config / API keys信息泄露Valve中危—2024-08-06 Big Picture web browser leaks login cookies and discloses sensitive information (may lead to account takeover)信息泄露Valve中危—2021-09-21 CS:GO Server -> Client RCE through OOB access in CSVCMsg_SplitScreen + Info leak in HTTP download内存破坏Valve高危$7,5002021-05-17 Add any depot to your app and access its contents without decryption key; via /apps/setcommonredists访问控制Valve中危—2024-07-30 Access to microtransaction sales data for lots of apps from 2014 to present at /valvefinance/sanity/访问控制Valve高危—2021-09-21 Add apps to packages 0, 61, 62 with /store/ajaxpackagemerge访问控制Valve中危—2020-09-09 Shell command injection in https://partner.steamgames.com/admin/game/publish/ via screenshot URL代码执行Valve高危—2024-07-30 Shell command injection in https://partner.steamgames.com/bundles/savestore/ via overwriting asset_path_identifier代码执行Valve高危—2024-07-30 Signedness issue in ClassInfo message handler leads to RCE on CS:GO client内存破坏Valve高危$7,5002021-05-27 Privilege Escalation vulnerability in steam's Remote Play feature leads to arbitrary kernel-mode driver installation访问控制Valve低危—2021-09-21 Shell command injection in https://partner.steamgames.com/apps/communityitems/ via file extension of item_image_small and item_image_large代码执行Valve高危—2024-07-30 ajaxgetachievementsforgame is not guarded for unreleased apps信息泄露Valve低危$7502020-07-30 Buffer overflow In hl.exe's launch -game argument allows an attacker to execute arbitrary code locally or from browser内存破坏Valve中危—2020-08-19 Unauthorized updates to extended_info properties in /store/ajaxpackagesave访问控制Valve中危—2020-09-09 OOB reads in network message handlers leads to RCE内存破坏Valve高危$7,5002021-05-04 Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanState信息泄露Valve低危—2020-03-20 [GoldSrc] RCE via 'spk' Console Command内存破坏Valve中危$3502020-08-19 [GoldSrc] RCE via malformed BSP file内存破坏Valve中危$4502020-08-19 Steam chat - trade offer presentation vulnerability业务逻辑Valve低危—2020-02-19 [Portal 2] Remote Code Execution via voice packets内存破坏Valve高危$5,0002021-05-10 SQL injection in /errors/viewbuild/SQL 注入Valve高危—2024-07-30