jsunpack-n

jsunpack-n jsunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input: PDF files - samples/sample-pdf.file Packet Captures - samples/sample-http-exploit.pcap HT...

CVE-2018-15982_EXP_IE

CVE-2018-15982EXP Usage msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.html。 Demo https://twitter.com/Evi1cg/status/1071284773169950721...

ParrotNG

ParrotNG ParrotNG es una herramienta capaz de identificar aplicaciones Adobe Flex SWF vulnerables a CVE-2011-2461. Para más detalles, consulte las diapositivas de nuestra charla en Troopers 2015. Descargue la última versión desde AQUÍ. Características Escrito en Java, basado en swfdump Un JAR, do...

flashmingo

FLASHMINGO Install NOTE: The following instructions are for Python3. If you need to install FLASHMINGO on Python2.7 you can checkout the release 1.0 under the releases tab. The installation steps are essentially the same. Install the Python3 packages listed in requirements.txt. You can use the...

CVE-2018-15982_EXP

CVE-2018-15982EXP Uso msfvenom -p windows/exec cmd=notepad.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=notepad.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin salida exp.swf e index.html. Demo https://twitter.com/Evi1cg/status/1071284773169950721...

CVE-2018-15982

CVE-2018-15982 Flash 2018-15982 UAF p0c.swf El archivo del exploit Informe en árabe: http://xredteam.com/?p=253 https://twitter.com/syfi2k https://www.youtube.com/watch?v=UBc9R4QqJyc&feature=youtu.be...

CVE-2026-95125

libming through 0.4.8 contains a heap buffer overflow in rreadc in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 Este script crea un payload swf para CVE-2018-15982, basado en el PoC de https://github.com/smgorelik/Windows-RCE-exploits. La vulnerabilidad fue descubierta por Chenming Xu y Ed Miles de Gigamon ATR. La vulnerabilidad es un fallo de use-after-free que permite la...

EUVD-2026-95074

libming through 0.4.8 contains a heap buffer overflow in rreadc in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service...

CVE-2026-95125

libming through 0.4.8 contains a heap buffer overflow in rreadc in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service...

PT-2026-108018

libming through 0.4.8 contains a heap buffer overflow in r readc in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service...

CVE-2026-95125

libming versions through 0.4.8 are vulnerable to a heap buffer overflow within the r_readc() function located in src/blocks/fromswf.c. This flaw can be triggered by processing a crafted SWF file containing a malformed or truncated RECT header , potentially leading to a denial of service . No spec...

CVE-2018-4878

Módulo de Metasploit para CVE-2018-4878 El archivo SWF se basa en el PoC de Michael Gorelik. Copia CVE-2018-4878.swf a data/exploits...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch Por Edmonds Commerce Este CVE se relaciona con una vulnerabilidad CSRF en los archivos .swf de Adobe Flex utilizados por Magento. Puede encontrar más información sobre el CVE aquí: Peter O'Callaghan - Vulnerabilidad CSRF de Magento a través de Adobe Flex Minded Security ...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Versión parcheada de uploader.swf y uploaderSingle.swf para corregir CVE-2011-2461 Más información sobre los archivos .swf vulnerables en el núcleo de Magento se puede encontrar aquí -...

CVE-2018-4878

Muestra de CVE-2018-4878 Fuente de la muestra: https://github.com/brianwrf/CVE-2017-4878-Samples Informe de análisis: http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Fuente del exploit en el script de Python: https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py es el script ...

rosettaflash

Rosetta Flash CVE-2014-4671 Adobe Flash Player anterior a 13.0.0.231 y 14.x anterior a 14.0.0.145 en Windows y OS X, y anterior a 11.2.202.394 en Linux, Adobe AIR anterior a 14.0.0.137 en Android, Adobe AIR SDK anterior a 14.0.0.137, y Adobe AIR SDK & Compiler anterior a 14.0.0.137 no restringen...

CVE-2026-57226

A flaw was found in Suricata, a network Intrusion Detection System IDS. When the non-default SWF Small Web Format decompression feature is enabled with an unsafe decompression depth, a remote attacker can send a specially crafted SWF response. This can trigger a heap buffer overflow during HTTP S...

CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

DEBIAN-CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...