CVE-2019-19815

A NULL pointer dereference flaw was found in F2FSPSB in fs/f2fs/f2fs.h in the F2FS filesystem exploiting the NAND flash memory-based storage device. This flaw allows an attacker to crash the system or leak internal kernel information. Mitigation Mitigation for this issue is either not available o...

UBUNTU-CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...

libming Heap Buffer Overflow DoS

The vulnerability of the decompileSETTARGET function in the libming library for creating Adobe Flash files is related to a data processing error when there is a mismatch in data sizes. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Hacking Hardware Password Managers: The RecZone

TL:DR Hardware security can be difficult to fathom, so I set out to research three password vaults as a newbie, sharing my findings. I picked three popular hardware vaults, each with different components, requiring different skills and equipment. Here's how I learned about disassembly, chipset...

Hacking Hardware Password Managers: passwordsFAST

TL:DR Taking three hardware password managers I used them to: Learn the basics of hardware hacking Practice disassembling Perform chipset research Understand pinouts and protocols Read data off each device The passwordFast device uses different ways to store the data on a flash chip with a...

Hacking Hardware Password Managers: Royal Vault Password Keeper

TL;DR: Taking three hardware password managers I used them to: Learn the basics of hardware hacking Practice disassembling Perform chipset research Understand pinouts and protocols Read data off each device The royal password vault boards looked to be reused from a previous hardware device with...

OS Command Injection

Ansible is vulnerable to OS command injection. The attack is possible because the module nxosfilecopy does not validate the remotefile parameter and directly uses the filenames from the parameter to copy files to a flash or bootflash on NXOS devices, allowing an attacker to inject malicious comma...

GLSA-201911-05 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201911-05 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact Please review th...

CVE-2019-17391

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker with physical access to the device to read the contents of read-protected eFuses, such as flash encryption and...

CVE-2011-0544

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

Design/Logic Flaw

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

CVE-2011-0544

CVE-2011-0544 affects phpBB 3.0.x–3.0.6 with an XSS vulnerability via the [flash] BB tag . The available documents consistently identify this issue in phpBB 3.0.x–3.0.6, but provide no explicit root-cause details, affected components beyond the flash tag, exploit status, or remediation (patch/ver...

CVE-2011-0544

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

CVE-2014-1214

views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...

CVE-2014-1214

views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...

CVE-2014-1214

The CVE affects Projoom’s NovaSFH (Smart Flash Header) Joomla! plugin, specifically the views/upload.php upload handler in version 3.0.2 and earlier. The root cause is lack of validation in the file upload path, allowing a crafted dest parameter and a Filename extension to upload and execute arbi...

CVE-2011-0544: Improper Neutralization of Input During Web Page Generation

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...

PT-2019-7074

Name of the Vulnerable Software and Affected Versions ProJoom Smart Flash Header NovaSFH component versions 3.0.2 and earlier for Joomla! Description The issue allows remote attackers to upload and execute arbitrary files. This is achieved via a crafted dest parameter and an arbitrary extension i...

Adobe Animate Code Issue Vulnerability

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate has a code issue vulnerability. An attacker can exploit this vulnerability to elevate privileges...