scholastic.ca XSS vulnerability

Vulnerable URL: http://www.scholastic.ca/titles/keys/wednesday/flashdetection.swf?flashContentURL=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| Yes, at 16.10.2017 Latest check for patch:| 16.10.2017 05:35 GMT Vulnerability type:| XSS Vulnerability status:|...

The vulnerability of the Actionscript 2 class in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Actionscript 2 class in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the MPEG-4 AVC software platform, Flash Player, allows attackers to execute arbitrary code.

The vulnerability of the MPEG-4 AVC software platform, Flash Player, arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the LocaleID class in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the LocaleID class in the Flash Player software platform arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player allows a perpetrator to execute arbitrary code.

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotel...

The vulnerability of the PNG image analyzer in the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed, caused by multiple masking of screen objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Texture Format (ATF) module in the Flash Player software allows attackers to execute arbitrary code.

Vulnerability of the Adobe Texture Format ATF module in the Flash Player software platform. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

CVE-2017-10725

Winamp 5.666 Build 3516x86 allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at inflv!winampGetInModule2+0x00000000000009a8."...

Threat Actors Target Chinese Language News Sites

A California-based news website covering China, called China Digital Times, was targeted in a spying campaign that involved phishing lures and the use of the NetWire remote access Trojan. The attacks began in February 2017 and were part of a wider campaign of phishing, reconnaissance and malware...

reservations.donpedrolake.com XSS vulnerability

Open Bug Bounty ID: OBB-256673 Description| Value ---|--- Affected Website:| reservations.donpedrolake.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the SDK functionality for metadata related to media playback profiles of the Flash Player allows attackers to execute arbitrary code.

The vulnerability of the SDK functionality for media playback profile metadata in the Flash Player lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-12722)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

The vulnerability of the metadata function of the Adobe Flash Player allows a hacker to execute arbitrary code.

The vulnerability of the metadata functionality of the Adobe Flash Player is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Starbucks: Possible SOP bypass in www.starbucks.com due to insecure crossdomain.xml

Hello. I was penetration testing your website, and noticed that your crossdomain.xml file allowed many sites access. I went through and, for all the sites that had .website.com with them, I scanned them for subdomains. I found that a subdomain for ███████.com a site in your crossdomain.xml as...

nexans.it XSS vulnerability

Vulnerable URL: https://www.nexans.it/Spain/2012/eolienne690x214cs5.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3437239 VIP...

wereadnatrona.com XSS vulnerability

Vulnerable URL: http://wereadnatrona.com/app/flash/mybook.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

Adobe Flash - Image Decoding Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1215 The attached png file causes an out-of-bounds read when being decoded by flash. To reproduce the issue, put LoadImage.swf and read1.png on a server, and visit:...

Adobe Flash - AVC Edge Processing Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1212 The attached file causes an out-of-bounds read in avc edge processing. 0day.today 2018-04-02...

Adobe Flash - ATF Parser Heap Corruption Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1216 The attached file causes heap corruption in the ATF parser. To reproduce the issue, copy atffree.atf and LoadImage.swf to a server, and visit...