PMS 0.42 Stack-Based Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer local module Tested on: Kali i686 GNU/Linux Description: PMS 0.42 is prone to a local unauthenticated stack-based overflow The vulnerability is...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2018-07863)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in MediaPlayerService::Client::notify in the MediaPlayerService.cpp file in Android. A local attacker can exploit this vulnerability...

Updated flash-player-plugin packages fix security vulnerability

It was found that flash versions older than 29.0.0.113 contained a use after free vulnerability that could lead to remote code execution CVE-2018-4919. A second vulnerability was a type confusion which could also lead to remote code execution CVE-2018-4920...

MGASA-2018-0189 Updated flash-player-plugin packages fix security vulnerability

It was found that flash versions older than 29.0.0.113 contained a use after free vulnerability that could lead to remote code execution CVE-2018-4919. A second vulnerability was a type confusion which could also lead to remote code execution CVE-2018-4920...

CVE-2018-9128

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068...

CVE-2018-9128

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068...

CVE-2018-9128

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068...

Buffer overflow

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068...

CVE-2018-9128

CVE-2018-9128 affects DVD X Player Standard 5.5.3.9 and is a local SEH-based buffer overflow triggered by a crafted .plf file, with public exploits available (e.g., Exploit-DB 44438/46584). The issue is described as related to CVE-2007-3068. Public sources show the vulnerability context on Window...

Exploit kits: Winter 2018 review

In the past, we used to do a blog series on exploit kits where we would periodically check in on the main players in the market. In March 2017, we wrote the Winter 2017 review, before exploit kit activity dropped down to a whisper. We've since discontinued our blog series, for lack of development...

GLSA-201803-08 : Adobe Flash Player: Multiple vulnerabilities (Underminer)

The remote host is affected by the vulnerability described in GLSA-201803-08 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Hermes ransomware distributed to South Koreans via recent Flash zero-day

This blog post was authored by @hasherezade, Jérôme Segura and Vasilios Hioureas. At the end of January, the South Korean Emergency Response Team KrCERT published news of a Flash Player zero-day used in targeted attacks. The flaw, which exists in Flash Player 28.0.0.137 and below, was distributed...

2018-03 Security Update for Adobe Flash Player for Windows 10 Version Next for x86-based Systems (KB4093296)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-03 Security Update for Adobe Flash Player for Windows 10 Version Next for x64-based Systems (KB4093296)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-03 Security Update for Adobe Flash Player for Windows 10 Version Next for ARM64-based Systems (KB4093296)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

flash-plugin: Type Confusion - remote code execution vulnerability (APSB18-05)

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-5133

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2018-07047)

Adobe Flash Player is a widely used, proprietary multimedia program player. An arbitrary code execution vulnerability exists in Adobe Flash Player due to improper handling of user-loaded content by Adobe Flash Player. An attacker can achieve arbitrary code execution by creating specially crafted...

Adobe Flash Player Multiple Remote Code Execution Vulnerabilities (APSB18-05) - Windows

Adobe Flash Player is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...