WordPress Audio Player SWF Cross Site Scripting

Exploit Title: Wordpress Audio Player Plugin XSS in SWF Release Date: 31/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/audio-player.2.0.4.6.zip Vendor Homepage: http://wpaudioplayer.com/ Tested...

PT-2013-3149 · WordPress +1 · Wp-Table Reloaded

Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...

Adobe Flash Player SWF File Buffer Overflow (APSB13-04; CVE-2013-0633)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an improper buffer allocation while handling specially crafted SWF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

WordPress WP-Table-Reloaded Cross Site Scripting

Exploit Title: Wordpress wp-table-reloadedþ plugin cross-site scripting in SWF Release Date: 24/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/wp-table-reloaded.latest-stable.zip Vendor Homepage:...

RHEL 3 / 4 : flash-plugin (RHSA-2009:0334)

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe...

RHEL 5 : flash-plugin (RHSA-2009:1188)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox...

RHEL 5 : flash-plugin (RHSA-2010:0464)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0464 advisory. - flash-plugin: crash caused by SWF files with different SWF versions obtained from the same URL CVE-2008-4546 - flash-plugin: multiple...

RHEL 3 / 4 : flash-plugin (RHSA-2009:1189)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox compatib...

RHEL 3 / 4 : flash-plugin (RHSA-2010:0624)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

RHEL 4 : flash-plugin (RHSA-2010:0834)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 Extras. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Adobe Flash Player memory corruption

Memory corruption on SWF parsing...

VLC Media Player < 2.0.5 Multiple Vulnerabilities

Binary data 6658.prm...

VLC Media Player < 2.0.5 Multiple Vulnerabilities

Binary data 801175.prm...

Adobe Flash Player and AIR SWF File Buffer Overflow (APSB12-27; CVE-2012-5676)

A remote code execution vulnerability has been reported in Adobe Flash Player and AIR...

RHEL 5 / 6 : flash-plugin (RHSA-2012:1569)

An updated Adobe Flash Player package that fixes three security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

VLC Media Player 'swf'文件栈缓冲区溢出漏洞

BUGTRAQ ID: 56861 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC media player 2.0.4及其他版本在处理恶意文件时没有正确进行边界检查，通过诱使受害者打开特制的SWF文件，远程攻击者可利用此漏洞使缓冲区溢出，在系统中执行任意代码或造成应用崩溃。 0 VLC Media Player 2.0.4 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

VideoLAN VLC Media Player 2.0.4 - .swf Crash (PoC)

VideoLAN VLC Media Player 2.0.4 - .swf Crash PoC Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : www.videolan.org/vlc/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh VL...

VideoLAN VLC Media Player 2.0.4 - '.swf' Crash (PoC)

Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : www.videolan.org/vlc/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh VLC media player also known as VLC is a highly...

VLC media player 2.0.4 buffer overflow PoC

buffer overflow during the handling of the swf file context-dependent Successful exploits can allow attackers to execute arbitrary code Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : http://www.videolan.org/vlc/ Impact : Med/High Contact :...

swfupload_f8.swf Cross Site Scripting

Hello list! I will draw your attention to XSS vulnerability in other web applications with swfupload. Earlier I've wrote about swfupload in AionWeb, Magento, Liferay Portal, SurgeMail, symfony and that this hole is available in many other web applications. In previous letters I've wrote concernin...