WordPress Secure HTML5 Video Player 3.14 Cross Site Scripting Vulnerability

WordPress Secure HTML5 Video Player plugin version 3.14 suffers from a cross site scripting vulnerability. Vulnerable Secure HTML5 Video Player Plugin 3.14 Secure HTML5 Video Player Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize...

Updated flash-player-plugin packages fix security vulnerability

Updated flash-player fixes security vulnerabilities...

MGASA-2017-0406 Updated flash-player-plugin packages fix security vulnerability

Updated flash-player fixes security vulnerabilities...

Disdain exploit kit and a side of social engineering deliver Neutrino Bot

Today we picked up new activity from an exploit kit that was first discovered back in August of this year. The Disdain exploit kit, simply identified by a string of the same name found in its source code, is being distributed again after a short interruption via malvertising chains. Disdain EK...

Bad Rabbit Linked to ExPetr/Not Petya Attacks

A link has been confirmed between the Bad Rabbit ransomware outbreak detected yesterday in major organizations in Russia and Ukraine and this summer’s ExPetr/Not Petya attacks. Researchers at Kaspersky Lab said there are “clear ties” between the two attacks though one major piece of the puzzle is...

Memory Corruption Vulnerability in Storm Video 5 PC Client (CNVD-2017-35532)

Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists when opening certain MOV files in the Storm Video player, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in Youku PC Player (CNVD-2017-35557)

Youku PC Player is video player software for Youku.com. A memory corruption vulnerability exists in YoukuNplayer.exe of Youku P Player when parsing special vob video files, which can be exploited by attackers to cause a denial of service or code execution...

Memory Corruption Vulnerability Exists in Video Pioneer PC (CNVD-2017-34297)

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer Player when parsing special vob files, which can be exploited by...

Memory Corruption Vulnerability Exists in Video Pioneer PC (CNVD-2017-34298)

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer Player when parsing special webm files, which can be exploited by...

Memory Corruption Vulnerability in Video Pioneer for PC

Video Pioneer is a software that can play video and audio online based on P2P Cloud 3D technology, supporting multiple streaming protocols, multiple audio and video formats. A memory corruption vulnerability exists in the Pioneer Player when parsing special mkv files, which can be exploited by...

Memory Corruption Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video Player when parsing certain format webm files, which can be exploited by attackers to cause a denial of service attack...

HDW Player,4.0.0, RCE

HDW Player,4.0.0 and all other versions, remote code execution Note that this vulnerabilitiy was supposedly fixed by the developer in version 3.2.2, the fact that this issue has arisen again suggests that the developer is aware of it and has created a deliberate back door. The VEL believe that th...

Memory Corruption Vulnerability in Lovecraft Universal Player

Aiki Universal Player is a local video software that can play image files and supports almost all major video formats. A memory corruption vulnerability exists in Lovecraft Universal Player when parsing the special envoy mp2 file format, which can be exploited by attackers to cause a denial of...

Memory Corruption Vulnerability in Sohu Video 5

Sohu Video 5 is a video player from Sohu. A memory corruption vulnerability exists in the Sohu Video 5 PC client when opening certain mov files, which can be exploited by an attacker to cause a denial of service...

Sohu Video 5 PC Client Has Denial of Service Vulnerability

Sohu Video 5 is a video player from Sohu. A denial of service vulnerability exists in Sohu Video Player when parsing certain 3gp files, which can be exploited by attackers to cause a denial of service attack...

GLSA-201710-22 : Adobe Flash Player: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201710-22 Adobe Flash Player: Remote execution of arbitrary code A critical type confusion vulnerability was discovered in Adobe Flash Player. Impact : A remote attacker could execute arbitrary code. Workaround : There is no known...

Memory Corruption Vulnerability in Lovecraft Universal Player (CNVD-2017-35554)

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. A memory corruption vulnerability exists in Aiki Universal Player when parsing the special envoy mkv file format, which can be exploited by attackers to cause a...

CVE-2017-11292

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-11292

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution...

Type confusion

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution...