23915 matches found
medicinsktidsskrift.dk XSS vulnerability
Vulnerable URL: http://medicinsktidsskrift.dk/flash/900477ELIEU250x200.swf?ClickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6249718 VIP...
frederiksenarchitects.dk XSS vulnerability
Vulnerable URL: http://www.frederiksenarchitects.dk/files/images/Flashknapper/88dcf9.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Adobe Flash Player Memory Corruption (APSB17-10: CVE-2017-3061)
A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Adobe Flash Player Memory Corruption (APSB17-10: CVE-2017-3060)
A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Updated flash-player-plugin package fixes security vulnerability
This update fixes the following critical security issues: use-after-free vulnerabilities that could lead to code execution CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063. memory corruption vulnerabilities that could lead to code execution CVE-2017-3060, CVE-2017-3061, CVE-2017-3064...
WordPress: plugins.trac.wordpress.org likely vulnerable to Cross Site Tracing (xst), TRACE HTTP method should be disabled
Background A Cross-Site Tracing XST attack involves the use of Cross-site Scripting XSS and the TRACE HTTP method. According to RFC 2616, "TRACE allows the client to see what is being received at the other end of the request chain and use that data for testing or diagnostic information." XST coul...
Chrome Universal XSS using late widget updates (CVE-2017-5006)
VULNERABILITY DETAILS Among the things that Document::shutdown does, |view-dispose| is called: From /thirdparty/WebKit/Source/core/frame/FrameView.cpp: void FrameView::dispose ... // FIXME: Do we need to do something here for OOPI? HTMLFrameOwnerElement ownerElement = mframe-deprecatedLocalOwner;...
Stuxnet LNK Exploits Still Widely Circulated
One of the alleged mandates around the development of the Stuxnet worm was that malware’s numerous components—which included a handful of zero days—should never escape the Natanz uranium enrichment facility in Iran. Eight years later, evidence continues to mount as to how that mandate was...
[SECURITY] Fedora 25 Update: ming-0.4.8-1.fc25
Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...
Adobe Flash PSDKEvent Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
[SECURITY] Fedora 24 Update: ming-0.4.8-1.fc24
Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...
WordPress: Multiple stored XSS in WordPress
Enguerran discovered a way to store payloads that would trigger XSS in the MediaElement Flash and Silverlight files that were bundled with WordPress. We coordinated a fix with MediaElement, and moved the files from WordPress Core to an optional plugin, since most users no longer needed them...
Flash Player < 25.0.0.148 Multiple RCE (APSB17-10)
Binary data 700058.prm...
[SECURITY] Fedora 26 Update: ming-0.4.8-1.fc26
Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...
SedSystems D3 Decimator Default Credentials / File Disclosure
SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to this device it will announce itself with "connected" or...
CentOS Update for kernel CESA-2017:0892 centos6
Check the version of kernel SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882688";...
RHEL 6 : flash-plugin (RHSA-2017:0934)
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:0990-1)
Adobe flash-player was updated to 25.0.0.148 to fix the following issues : - Vulnerabilities fixed as advised under APSB17-10 : - Use-after-free vulnerabilities that could lead to code execution CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063. - Resolve memory corruption vulnerabilitie...
CVE-2017-3060
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution...
