Hackers Use New Flash Zero-Day Exploit to Distribute FinFisher Spyware

FinSpy—the infamous surveillance malware is back and infecting high-profile targets using a new Adobe Flash zero-day exploit delivered through Microsoft Office documents. Security researchers from Kaspersky Labs have discovered a new zero-day remote code execution vulnerability in Adobe Flash,...

Adobe Flash Player CVE-2017-11292 Type Confusion Remote Code Execution Vulnerability

Description Adobe Flash Player is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected...

WordPress Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress 4.8.2 and earlier versions. A remote attacker can exploit the...

Flash Player -- Remote code execution

Adobe reports: This update resolves a type confusion vulnerability that could lead to remote code execution CVE-2017-11292...

PT-2017-4162 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 27.0.0.159 and earlier Description: The issue is related to a flawed bytecode verification procedure in Adobe Flash Player, which allows an untrusted value to be used in the calculation of an array index. This can...

[ASA-201710-21] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-21 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : lib32-flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-450 Summary ======= The package...

[ASA-201710-20] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-20 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-449 Summary ======= The package flashplug...

ulyd.bek.no XSS vulnerability

Vulnerable URL: http://ulyd.bek.no/f-train/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

Radancy: xss flash on http://presentatie.werkenbijmcdonalds.nl/

A vulnerability in a flash file caused javascript to be executed in banners hosted on presentatie.werkenbijmcdonalds.nl...

t.millenniemalen.nu XSS vulnerability

Open Bug Bounty ID: OBB-337888 Description| Value ---|--- Affected Website:| t.millenniemalen.nu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pieps.ducky.nl XSS vulnerability

Vulnerable URL: http://pieps.ducky.nl/diploma-uitreiking/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

trouwenmetnaaldenkraak.nl XSS vulnerability

Vulnerable URL: http://trouwenmetnaaldenkraak.nl/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

p3c.nl XSS vulnerability

Vulnerable URL: http://p3c.nl/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

wunnik.nl XSS vulnerability

Vulnerable URL: http://www.wunnik.nl/Mark/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

zwerfafvalservice.nl XSS vulnerability

Open Bug Bounty ID: OBB-337880 Description| Value ---|--- Affected Website:| zwerfafvalservice.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tinekevangeel.nl XSS vulnerability

Open Bug Bounty ID: OBB-337875 Description| Value ---|--- Affected Website:| tinekevangeel.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lydwien.nl XSS vulnerability

Vulnerable URL: http://www.lydwien.nl/viool/flash/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

puurnatuur.nl XSS vulnerability

Vulnerable URL: http://www.puurnatuur.nl/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

markus-hoppe.net XSS vulnerability

Open Bug Bounty ID: OBB-337843 Description| Value ---|--- Affected Website:| markus-hoppe.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vermeren.net XSS vulnerability

Vulnerable URL: http://www.vermeren.net/halikarnas/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...