Adobe Flash Player "Button" Remote Code Execution

No description provided by source. $Id: adobeflashplayerbutton.rb 10857 2010-11-01 22:34:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Adobe Flash Player AVM Bytecode Verification

No description provided by source. $Id: adobeflashplayeravm.rb 12091 2011-03-23 04:41:48Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Adobe Flash Player ActionScript Launch Command Execution Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Adobe Flash Player MP4 SequenceParameterSetNALUnit Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Winamp 5.572 - Local Crash PoC (0day)

No description provided by source. !\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC Tested : Windows xp sp3 AUThoR: R3d-D3v!L Credits to : XP10HACKER XP10.ME print qq WiNamP V5.572 0day SWF local CRASH PoC Credits : XP10.ME XP10HACKER Author ...

Adobe Flash Player <= 8.0.24 - SWF File Handling Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24856/info Adobe Flash Player is prone to a remote code-execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue by tricking an unsuspecting victim into opening...

VBulletin 3.5.x/3.6.x SWF Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21736/info vBulletin is prone to a vulnerability that may let remote attackers inject arbitrary script code into the application. If exploited, this vulnerability may let attackers steal cookie-based authentication...

Adobe Flash Player Shader Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...

MKPortal 1.0/1.1 Admin.PHP Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25515/info MKPortal is prone to an authentication-bypass vulnerability because it fails to restrict access to certain administrative functions. Attackers can exploit this issue to gain unauthorized access to the...

Flash Movie Player 1.5 - File Magic Denial of Service Vulnerability

No description provided by source. Flash Movie Player v1.5 File Magic Crash http://www.eolsoft.com/ http://www.eolsoft.com/freeware/flashmovieplayer/ Author: Matthew Bergin Website: http://berginpentesting.com Date: August 25, 2010 Description: Flash Movie Player is a free stand-alone player for...

Adobe Pixel Shader

Added: 06/24/2014 CVE: CVE-2014-0515 BID: 67092 OSVDB: 106347 Background The Adobe Flash plugin provides flash content rendering for web browsers. Problem A buffer overflow exists due to an error in processing SWF files. The vulnerable function exists in the the DisplayShader class and can be...

Adobe Pixel Shader

Added: 06/24/2014 CVE: CVE-2014-0515 BID: 67092 OSVDB: 106347 Background The Adobe Flash plugin provides flash content rendering for web browsers. Problem A buffer overflow exists due to an error in processing SWF files. The vulnerable function exists in the the DisplayShader class and can be...

Tipask全版本通杀持久型XSS漏洞

简要描述： Tipask问答系统是一款开放源码的PHP仿百度知道程序。以国人的使用习惯为设计理念，采用MVC构架，系统具有速度快，SEO友好，界面操作简洁明快等特点。天极网、戴尔中国、WPS office等大型网站均采用了该系统。 详细说明： Tipask问答系统在对用户提问的时候允许上传附件类型存在安全隐患： 文件 /control/attach.php 有如下代码： function onupload //上传配置 $config = array "uploadPath" = "data/attach/", //保存路径 "fileType" = array".rar", ".doc...

ThinkSNS 储存型xss一枚

简要描述： rt. 详细说明： 对于swf文件 过分信任 通杀所有浏览器 测试代码 : http://demo.thinksns.com/t3/weiba/post2075 chrome firefox ie 10 可蠕虫。 漏洞证明： chrome firefox https://images.seebug.org/upload/201406/150142590b17fc5d7dedb7e685f9e1f2797b7c98...

openSUSE Security Update : gnash (openSUSE-SU-2012:0415-1)

specially crafted swf files could cause an integer overflow in gnash %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-177. The text description of this plugin is C SUSE LLC...

RHEL 5 / 6 : flash-plugin (RHSA-2014:0745)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

程氏舞曲CMS储存型 xss（5）

简要描述： rt，swf啊。。 详细说明： 上传视频处 。对于外部swf文件 过分信任 可插入 如下代码 构造 恶意的 swf 执行 js 像这样 alert 这是 获取cookie的swf代码 package import flash.external.ExternalInterface; import flash.display.Sprite; import flash.display.Sprite; import flash.events.Event; import flash.net.URLLoader; import flash.net.URLRequest; import...

Destoon B2B 2014-05-21最新版csrf getshell

简要描述： 上传问题+csrf+后台任意命令执行 = csrf getshell 详细说明： 先说上传问题，自带的fck编辑器没有验证上传图片的合法性，只判断了后缀名。 可以通过上传一个.jpg后缀的swf来进行csrf 然后是后台命令执行 /member/admin/sendmail.inc.php 行151 default: ifisset$send ifisset$preview && $preview $content = stripslashes$content; if$template if$sendtype == 2 $emails = explode"\n",...