CVE-2018-16832

CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header...

CVE-2018-16832

CVE-2018-16832 describes a CSRF vulnerability in the anti-csrf decorator of xunfeng 0.2.0. The root cause is in views/lib/AntiCSRF.py, where the request.host value can be overwritten with the content of the X-Forwarded-Host header, enabling an attacker to modify configuration via a Flash file. Th...

Rosetta Flash JSONP Vulnerability

WebApiContrib.Formatting.Jsonp is affected by the Rosetta flash JSONP vulnerability. The WriteToStreamAsync function in JsonpMediaTypeFormatter.cs allows printable characters from the callback parameter but is not able determine if the parameter contains a Flash file. An attacker will be able to...

UBUNTU-CVE-2018-14615

An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative...

The software for Cisco WebEx Business Suite, WebEx Meetings, and WebEx Meetings Server is vulnerable due to insufficient validation of input data. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Cisco WebEx Business Suite, WebEx Meetings, and WebEx Meetings Server software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted flash file .swf using the...

A Deep Dive Into RIG Exploit Kit Delivering Grobios Trojan

As discussed in previous blogs, exploit kit activity has been on the decline since the latter half of 2016. However, we do still periodically observe significant developments in this space, and we have been observing interesting ongoing activity involving RIG Exploit Kit EK. Although the volume o...

CVE-2018-0112

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

CVE-2018-0112

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

CVE-2018-0112

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

Cisco WebEx Clients Remote Code Execution Vulnerability

A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An...

UBUNTU-CVE-2018-9132

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

Libming Null Pointer Dereference Vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'getInt' function of the decompile.c file in libming version 0.4.8. A remote attacker can exploit this...

Memory Misreference Vulnerability in libming 'decompileSingleArgBuiltInFunctionCall' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileSingleArgBuiltInFunctionCall' function in the decompile.c file in libming version...

UBUNTU-CVE-2018-8962

In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

UBUNTU-CVE-2018-8964

In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

UBUNTU-CVE-2018-8807

In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

Memory Misreference Vulnerability in libming 'decompileCALLFUNCTION' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory misreference vulnerability exists in the 'decompileCALLFUNCTION' function of the decompile.c file in libming version 0.4.8. A remote...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2018-07306)

Adobe Connect web conferencing software service provides an immersive online meeting experience for collaboration, virtual classrooms and large-scale webinars. A cross-site scripting vulnerability exists in Adobe Connect due to the software's failure to properly restrict SWF file uploads, which...

DEBIAN-CVE-2017-18193

fs/f2fs/extentcache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service BUG via an application with multiple threads...

libming denial of service vulnerability (CNVD-2018-03975)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readSBits' function in the util/read.c file in libming version 0.4.8. A remote attacker can exploit th...