23900 matches found
PT-2018-16794 · Pandoratv · Mplayer
Name of the Vulnerable Software and Affected Versions: KMPlayer versions 4.2.2.15 and earlier Description: The issue is a Heap Based Buffer Overflow that can be exploited using a crafted FLV format file. The problem arises when more frame data is copied to heap memory than the size specified in t...
The vulnerability of the Flash Player software, related to errors in data type conversion, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software is related to errors in data type conversion. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Issues Patch for Windows Zero-Day Flaw Under Active Attack
Microsoft today, on its year-end December Patch Tuesday, released security updates to patch a total 39 vulnerabilities its Windows operating systems and applications—10 of which are rated as critical and other important in severity. One of the security vulnerabilities patched by the tech giant th...
Exploit for Use After Free in Adobe Flash_Player
Credits ========= - @Ridter https://github.com/Ridter/CVE-2018-1...
Exploit for Use After Free in Adobe Flash_Player
CVE-2018-15982EXP Usage msfvenom -p windows/exec cm...
Patch Tuesday, December 2018 Edition
Adobe and Microsoft each released updates today to tackle critical security weaknesses in their software. Microsoft's December patch batch is relatively light, addressing more than three dozen vulnerabilities in Windows and related applications. Adobe has issued security fixes for its Acrobat and...
Adobe December 2018 Security Update Fixes Reader, Acrobat
Adobe has patched 87 vulnerabilities for Acrobat and Reader in its December Patch Tuesday update, including a slew of critical flaws that would allow arbitrary code-execution. The scheduled update comes less than a week after Adobe released several out-of-band fixes for Flash Player, including a...
A week in security (December 3 – 9)
Last week on Malwarebytes Labs, we gave readers an FYI on multiple breaches that affected Humble Bundle, Quora, and Dunkin' Donuts, to name a few. This follows the announcement from Marriott about a four-year-long breach that impacted half a billion of its patrons. We also pushed out the report,...
Exploit for Use After Free in Adobe Flash_Player
CVE-2018-15982EXP Usage msfvenom -p windows/exec...
MGASA-2018-0478 Updated flash-player-plugin packages fix security vulnerability
Use after free flaw enabling arbitrary code execution. CVE-2018-15982 Insecure Library Loading DLL hijacking flaw enabling privilege escalation. CVE-2018-15983...
Updated flash-player-plugin packages fix security vulnerability
Use after free flaw enabling arbitrary code execution. CVE-2018-15982 Insecure Library Loading DLL hijacking flaw enabling privilege escalation. CVE-2018-15983...
FreeBSD : Flash Player -- multiple vulnerabilities (49cbe200-f92a-11e8-a89d-d43d7ef03aa6)
Adobe reports : - This update resolves a use-after-free vulnerability that could lead to arbitrary code execution CVE-2018-15982. - This update resolves an insecure library loading vulnerability that could lead to privilege escalation CVE-2018-15983. C Tenable Network Security, Inc. The descripti...
RHEL 6 : flash-plugin (RHSA-2018:3795)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3795 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version...
Adobe Flash Player Insecure Library Loading (DLL Hijacking) Vulnerability
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to elevate...
flash-plugin: Arbitrary Code Execution vulnerability (APSB18-42)
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
flash-mini.com XSS vulnerability
Open Bug Bounty ID: OBB-708102 Description| Value ---|--- Affected Website:| flash-mini.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
New Adobe Flash Zero-Day Exploit Found Hidden Inside MS Office Docs
Cybersecurity researchers have discovered a new zero-day vulnerability in Adobe Flash Player that hackers are actively exploiting in the wild as part of a targeted campaign appears to be attacking a Russian state health care institution. The vulnerability, tracked as CVE-2018-15982 , is a...
New Adobe Flash Zero-Day Exploit Found Hidden Inside MS Office Docs
Cybersecurity researchers have discovered a new zero-day vulnerability in Adobe Flash Player that hackers are actively exploiting in the wild as part of a targeted campaign appears to be attacking a Russian state health care institution. The vulnerability, tracked as CVE-2018-15982, is a...