ParrotNG

ParrotNG ParrotNG 是一款能够识别易受 CVE-2011-2461 攻击的 Adobe Flex 应用程序 SWF 的工具。更多详情请参阅我们的 Troopers 2015 演讲 幻灯片。 从此处下载最新版本。 功能特点 使用 Java 编写，基于 swfdump 一个 JAR 包，两种形态：命令行工具和 Burp Pro 被动扫描器插件 检测使用易受攻击的 Flex SDK 版本编译的 SWF 文件，这些文件可能已通过 Adobe 的工具 修补，也可能未受影响 如何使用 - 命令行 1. 从发布页面下载最新版本的 ParrotNG 2. 只需使用以下命令： $ java...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 用于修复 CVE-2011-2461 的 uploader.swf 和 uploaderSingle.swf 修补版本 有关 Magento 核心中易受攻击的 .swf 文件的更多信息，请参见此处 - https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html CVE-2011-2461 的主要原因由 @Mindedsecurity 作出了最佳解释...

K62050299: Adobe Flex vulnerability CVE-2011-2461

Security Advisory Description Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains. CVE-2011-2461 Impact There is no impact; F5 produc...

Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vulnerability

Dell SonicWALL GMS versions 8.1 and below are compiled with a vulnerable version of Adobe Flex SDK allowing for same-origin request forgery and cross-site content hijacking i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page:...

Adobe cve-2 0 1 1-2 4 6 1 vulnerability can still be exploited-vulnerability warning-the black bar safety net

A There have been four years of Adobe Flash patch did not correctly resolve the Flex application vulnerable issue, and the attacker still can exploit this vulnerability. Reportedly, this vulnerability affects the world Alexa rank of the top ten most popular sites in the 3 0 percent. Linkedln...

Adobe CVE-2011-2461 Remains Exploitable Via Flex Four Years After Patch

UPDATE: This article has been updated to add commentary and clarification from Adobe. A four year old Adobe Flash patch did not properly resolve a vulnerable Flex application, and attackers can exploit the bug, which is said to affect some 30 percent of Alexa’s top 10 most popular sites in the...

Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)

A Cross-site scripting vulnerability has been reported in Adobe Flex SDK. The vulnerability is due to an error in the way Flex-generated SWF files accept arguments. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...

Adobe Flex SDK 跨站脚本执行漏洞(CVE-2011-2461)

No description provided by source...

CVE-2011-2461

Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains...