KLA11707 Security update for Adobe Flash Player

This security update addresses the multiple vulnerability, which is described in Adobe Security Bulletin APSB19-26 or KLA11479. Original advisories ADV190012 Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list KB list 4497932 Solution Install...

KLA11479 ACE vulnerabilities in Adobe Flash Player

An use-after-free vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB19-26 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related product...

KLA12116 PE vulnerability in VMware Workstation and Player

A DLL hijacking vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to gain privileges. Original advisories VMSA-2019-0007 Related products VMware-Workstation VMware-Player CVE list CVE-2019-5526 critical Solution Update to the latest version...

Flash Player -- arbitrary code execution

Adobe reports: This update resolves a use-after-free vulnerability that could lead to arbitrary code execution CVE-2019-7837...

KB4497932: Security update for Adobe Flash Player (May 2019)

The remote Windows host is missing security update KB4497932. It is, therefore, affected by an arbitrary code execution vulnerability in Adobe Flash Player. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid125068; scriptversion"1.4"; scriptcvsdate"Date: 2019/10/30...

Adobe Flash Player for Mac <= 32.0.0.171 (APSB19-26)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 32.0.0.171. It is therefore affected by an arbitrary code execution vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid125055; scriptversion"1.4";...

Adobe Flash Player <= 32.0.0.171 (APSB19-26)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 32.0.0.171. It is therefore affected by an arbitrary code execution vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

APSB19-26 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address a critical vulnerability in Adobe Flash Player. Successful exploitation could lead to arbitrary code execution in the context of the current user...

TwistedBrush Pro Studio 24.06 Denial Of Service

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - 'Resize Image' Denial of Service PoC Date: 13/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows 10...

TwistedBrush Pro Studio 24.06 - '.srp' Denial of Service (PoC)

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - '.srp' Denial of Service PoC Date: 13/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows 10 Proof o...

CVE-2019-9618

The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter...

Design/Logic Flaw

The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter...

CVE-2019-9618

The CVE-2019-9618 issue affects WordPress GraceMedia Media Player 1.0. The vulnerability is a Local File Inclusion in the plugin’s templates/files/ajax_controller.php, caused by unsanitized use of the cfg parameter (require_once($_GET['cfg']);). This allows an attacker to include arbitrary local ...

CVE-2019-9618

The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter...

TwistedBrush Pro Studio 24.06 - (.srp) Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: TwistedBrush Pro Studio 24.06 - '.srp' Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.pixarra.com Software Link http://www.pixarra.com/uploads/9/4/6/3/94635436/tbrusha.exe Version: 24.06 Tested on: Windows 10 Proof of Concept: 1.- Ru...

Fedora Update for mpris-scrobbler FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for adplug FEDORA-2018-de3a0ba76e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google Chrome Media Player Out-of-Bounds Access Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the media player in versions prior to Google Chrome 74.0.3729.131. An attacker can exploit this vulnerability by tricking a user into visiting a specially crafted website to bypass security...

Stable Channel Update for Desktop

The stable channel has been updated to 74.0.3729.131 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

CARBANAK Week Part Four: The CARBANAK Desktop Video Player

Part One, Part Two and Part Three of CARBANAK Week are behind us. In this final blog post, we dive into one of the more interesting tools that is part of the CARBANAK toolset. The CARBANAK authors wrote their own video player and we happened to come across an interesting video capture from CARBAN...