53 Percent of Enterprise Flash Installs are Outdated

The number of outdated versions of Adobe Flash running on enterprise computers grew 10 percent year-over-year to 53 percent of endpoints, despite numerous devastating attacks targeting the maligned software and endless calls to deprecate it. Duo Security said in its 2017 Duo Trusted Access Report...

2xl.be XSS vulnerability

Vulnerable URL: http://www.2xl.be/modules/core/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21459112 VIP...

avisghana.com XSS vulnerability

Vulnerable URL: http://www.avisghana.com/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6754517 VIP websit...

Flash cms database insertion vulnerability

Flash Flash cms is a system developed by Zibo Flash Network Technology Co. Flash Flash cms database insertion vulnerability. Attackers can use this vulnerability to directly obtain server privileges...

SQL Injection Vulnerability in Flash cms O_id Parameter

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Oid parameter of the Flash cms /member/memberwuliu.asp page. The vulnerability stems from the program's failure to filter user-submitted data. An attacker c...

Storage-based Cross-site Scripting Vulnerability in Zibo Shining Network Technology Co. Ltd.'s Flash Website Building System

Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a stored cross-site scripting vulnerability in the flash CMS of Zibo Shining Network Technology Co. Attackers can use this vulnerability to insert malicious js code in the page, obtain user cookies and oth...

Authentication Bypass Vulnerability in the Background of FLASH Website Management System of Unicom

CFCMS is a self-service website building platform with full Flash as its core. Authentication bypass vulnerability exists in the background of CFCMS. The vulnerability exists in /xmlEditor/chkuser.asp, which can be exploited by attackers to bypass the background login authentication and launch...

Shining Flash cms Frontend Arbitrary User Login Vulnerability

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a front-end arbitrary user login vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, an attacker can use the vulnerability to bypass authentication t...

Flash cms /wap has multiple SQL Injection Vulnerabilities

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a SQL injection vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Multiple Pages of Zibo Shining Network Technology Co.

Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a SQL injection vulnerability in the text.asp page and slideshowinfo.asp page of the flash CMS of Zibo Flash Network Technology Co. Allow attackers to exploit the vulnerability to obtain sensitive...

SQL injection vulnerability in the html.asp page of flash website builder system of Zibo Shining Network Technology Co.

Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. The html.asp page of Zibo Flash CMS is vulnerable to SQL injection. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

D-Link DCS Series Cameras Insecure Crossdomain.xml

Exploit Title: Insecure CrossDomain.XML in D-Link DCS Series Cameras Date: 22/02/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-933L with firmware version 1.03. Other...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

GLSA-201705-12 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201705-12 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

SAP Web Dynpro Flash Island XML External Entity Injection Vulnerability

SAP Web Dynpro ABAP is the SAP standard UI technology from SAP Germany for developing Web applications in the ABAP environment. It consists of a runtime environment and a graphical development environment that integrates the special Web Dynpro tools from the ABAP Workbench SE80. An XML external...

CVE-2015-8477

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...

DEBIAN-CVE-2015-8477

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...

CVE-2015-8477

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...

CVE-2015-8477

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...

Cross site scripting

Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...