CVE-2015-5122

creationtimestamp| type| source ---|---|--- 2015-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37599 2015-07-28 08:14:15+00:00| seen| MISP/55b73940-0078-4ad9-8fba-4095950d210b 2015-08-11 07:17:58+00:00| seen| MISP/55c98ff2-f2fc-4284-8a34-f483950d210b 2015-08-22...

Adobe Flash - opaqueBackground Use-After-Free (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash opaqueBackground Use After Free', 'Description' = %q This module exploits an use after free on Adobe Flash Player. The...

Adobe Flash Player Multiple Vulnerabilities -01 (Jul 2015) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Technical analysis: Hacking Team for Flash 0day brace-vulnerability warning-the black bar safety net

! The vast JIT CODE, how to find we want to track The code? Borrow HackingTeam Flash 0day event detail debug flow and jitcode, to help some friends to follow better learning. ValueOf the frequency out of the vulnerability, adobe now has been the lack what fill what, a 7 on No. 8, only repair the...

Adobe Flash opaqueBackground Use After Free

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash opaqueBackground Use After Free', 'Description' = %q This module exploits an use after free on Adobe Flash Player. The...

Hacking Team attack code analysis Part 4: Flash 0day Vulnerability CVE-2 0 1 5-5 1 2 2-vulnerability warning-the black bar safety net

A few days ago we analyzed the Hacking Team leaks data 3 virus, including a flash 0day, a flash nday and a windows font to mention the right to 0day on. Yesterday Adobe released the latest flash version 18.0.0.203, and patching one of the flash 0day（CVE-2 0 1 5-5 1 1 9-in. However, today twitter...

Adobe Flash ActionScript 3 opaqueBackground use-after-free vulnerability

Overview Adobe Flash Player contains a vulnerability in the ActionScript 3 opaqueBackground property, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Flash Player versions 9.0 through version 18.0.0.204 contain a use-after-fre...

Adobe Flash opaqueBackground Use After Free (APSA15-04: CVE-2015-5122)

A use after free vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles the opaqueBackground property setter of the DisplayObject class. A successful exploitation can allow a remote attacker to execute arbitrary code on a vulnerable...

Adobe Flash Player -- critical vulnerabilities

Adobe reports: Critical vulnerabilities CVE-2015-5122, CVE-2015-5123 have been identified. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. Adobe is aware of reports that exploits targeting these vulnerabilities have been...

Type confusion

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging a...

ArcGIS for Server Vulnerability Disclosure

Product: ArcGIS for Server Vendor: ESRI Vulnerable Version: 10.1.1 Tested Version: 10.1.1 Vendor Notification: June 19, 2014 Public Disclosure: August 15, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference: CVE-2014-5121 Risk Level: Medium CVSSv2 Base Score: 4.3...

CVE-2014-5122

CVE-2014-5122 is an Open Redirect vulnerability in ESRI ArcGIS for Server 10.1.1. A crafted login URL can redirect the user’s browser to an attacker-controlled site via an unspecified parameter, enabling phishing-like redirections. The vulnerability is documented in the ArcGIS for Server disclosu...

openSUSE Security Update : seamonkey (seamonkey-5122)

This update brings Mozilla SeaMonkey to 2.3.3. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Full Disclosure - Linksys EA2700, EA3500, E4200 and EA4500 - Authentication Bypass to Administrative Console

Vulnerable products : Linksys EA2700, EA3500, E4200, EA4500 Vulnerability: Due to an unknown bug, which occurs by every indication during the installation and/or upgrade process, port 8083 will often open, allowing for direct bypass of authentication to the "classic Linksys GUI" administrative...

Linksys EA2700, EA3500, E4200, EA4500 Authentication Bypass

Linksys products EA2700, EA3500, E4200, and EA4500 suffer from having an unauthenticated interface on port 8083 periodically. Vulnerable products : Linksys EA2700, EA3500, E4200, EA4500 Vulnerability: Due to an unknown bug, which occurs by every indication during the installation and/or upgrade...

Update: Linksys EA2700, EA3500, E4200v2, EA4500 Unspecified unauthenticated remote access

----------------------------------------------------------------------------- Vulnerabilities: An unspecified bug can cause an unsafe/undocumented TCP port to open allowing for: - Unauthenticated remote access to all pages of the router administration GUI, bypassing any credential prompts under...

phlyLabs phlyMail Lite 4.03.04 - Full Path Disclosure / Persistent Cross-Site Scripting

phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities input type="h...

Google Chrome < 23.0.1271.64 Multiple Vulnerabilities

Binary data 800919.prm...

Google Chrome Multiple Vulnerabilities - Nov2012 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12macosx.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...