Adobe Reader PDF Viewer Buffer Overflow

The vulnerability of the Flash Player software is related to the execution of operations beyond the buffer in memory when processing SWF content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created malware file...

Authplay DLL Flash Player Code Execution

The vulnerability of the Authplay.dll library AuthPlayLib.bundle in the Flash Player software, as well as in programs for viewing and editing PDF files like Adobe Reader and Adobe Acrobat, arises due to the execution of operations outside the buffer in memory when incompatible data types are used...

Matrix3D Heap Buffer Overflow RCE

The vulnerability of the copyRawDataTo method in the Matrix3D class of the Adobe Flash Player lies in numerical processing errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

TWAV can be attacked by flash loan

Lines of code Vulnerability details Impact updateTWAV can be flash loaned. Hacker may pay the flash loan fee for 4 blocks then execute the attack after that. Proof of Concept function updateTWAVuint256 valuation, uint32 blockTimestamp internal uint32 timeElapsed; unchecked timeElapsed =...

Adobe Flash Player Buffer Overflow RCE

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe Flash Player Code Execution

The vulnerability of the Adobe Flash Player, the Adobe Reader and Adobe Acrobat PDF viewing and editing programs, as well as the Adobe AIR software platform, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute...

Adobe Flash Player Buffer Overflow RCE

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe Flash Player Buffer Overflow RCE

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Lepin EP-KP001 KP001_V19 Authentication Bypass Vulnerability

When analyzing the USB flash drive Lepin EP-KP001, Matthias Deeg found out that it uses an insecure hardware design which allows an attacker to bypass the password-based user authentication. Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability...

Lepin EP-KP001 KP001_V19 Authentication Bypass

Advisory ID: SYSS-2022-024 Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability Type: Violation of Secure Design Principles CWE-657 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-04-12 Solution Date: - Public Disclosure:...

Loss of yield can occur due to not specifying minAmountsOut when exiting BAL/ETH pool

Lines of code Vulnerability details Impact When exiting the BAL/ETH pool, due to not specifying anything for minAmountsOut an attacker can frontrun the transaction and cause a large change in price in the pool. This in turn leads to a large impermanent loss which is realised when the strategy bur...

Yield can be lost due to not specifying limit when transferring WETH to Aura

Lines of code Vulnerability details Impact In the harvest function, when the contract swaps WETH to Aura, limit is set to 0 allowing an attacker to front run the transaction and cause substantional loss of yield. swapSingleSwap singleSwap, FundManagement funds, uint256 limit, uint256 deadline...

Adobe Animate Out-of-Bounds Write Vulnerability (CNVD-2022-50234)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an out-of-bounds write vulnerability. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

CVE-2022-29948

Due to an insecure design, the Lepin EP-KP001 flash drive through KP001V19 is vulnerable to an authentication bypass attack that enables an attacker to gain access to the stored encrypted data. Normally, the encrypted disk partition with this data is unlocked by entering the correct passcode 6 to...

CVE-2022-29948

Due to an insecure design, the Lepin EP-KP001 flash drive through KP001V19 is vulnerable to an authentication bypass attack that enables an attacker to gain access to the stored encrypted data. Normally, the encrypted disk partition with this data is unlocked by entering the correct passcode 6 to...

Swftools missing resource release vulnerability

Swftools is a set of utilities for working with Adobe Flash files SWF files. swftools 2020-12-22 and prior versions contain a missing resource release vulnerability that stems from the use of swfdump which can lead to an application memory leak. An attacker could exploit this vulnerability to...

Swftools Buffer Overflow Vulnerability (CNVD-2022-62209)

Swftools is a set of utilities for working with Adobe Flash files SWF files. swftools 2020-12-22 and earlier versions of swfdump.c have a heap buffer overflow vulnerability in the handleEditText function. An attacker could exploit this vulnerability to cause code execution...

Swftools null pointer dereference vulnerability (CNVD-2022-62212)

Swftools is a set of utilities for working with Adobe Flash files SWF files. A null pointer dereference vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from the presence of a NULL pointer dereference in the function swfGetBits located in rfxswf.c. An attacker could...

Swftools out-of-bounds write vulnerability (CNVD-2022-62213)

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in function swfFontExtractDefineTextCallback located in swftext.c. The vulnerability is cause...

Swftools out-of-bounds write vulnerability (CNVD-2022-62215)

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in the function swfGetD64 located in rfxswf.c. The vulnerability is caused by a heap buffer...