PT-2018-16839

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description The issue is caused by an integer signedness error vulnerability, specifically a left shift of a negative value, in the readSBits function located in util/read.c. This can be exploited by remote attackers to...

Node.js third-party modules: [redis-commander] Reflected SWF XSS via vulnerable "clipboard.swf" component

Hi, An injection in the highlighterId parameter of the clipboard.swf component can be used to reflect JavaScript in the context of hosts running Redis Commander. Module specification Name: redis-commander Version: 0.4.5 latest release build Verified conditions Test server: Ubuntu 16.04 LTS Browse...

Denial of Service Vulnerability in SWFTools Software gif2swf Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the gif2swf module of the SWFTools software. An attacker working with malformed gif files can cause the program to crash and, if successfully exploited, can lead to arbitrar...

chelshamleather.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429618 Description| Value ---|--- Affected Website:| chelshamleather.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

beedesigns.f9.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429613 Description| Value ---|--- Affected Website:| beedesigns.f9.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

learntocue.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429597 Description| Value ---|--- Affected Website:| learntocue.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

zound.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429598 Description| Value ---|--- Affected Website:| zound.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

kuchynteplice.cz XSS vulnerability

Open Bug Bounty ID: OBB-429578 Description| Value ---|--- Affected Website:| kuchynteplice.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

thierryjulien.fr XSS vulnerability

Open Bug Bounty ID: OBB-429540 Description| Value ---|--- Affected Website:| thierryjulien.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

coulon-cie.pagesperso-orange.fr XSS vulnerability

Open Bug Bounty ID: OBB-429535 Description| Value ---|--- Affected Website:| coulon-cie.pagesperso-orange.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

CVE-2017-16883

The outputSWFTEXTRECORD function in util/outputscript.c in libming = 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

CVE-2017-16883

The outputSWFTEXTRECORD function in util/outputscript.c in libming = 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

CVE-2017-16883

The outputSWFTEXTRECORD function in util/outputscript.c in libming = 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

CVE-2017-16883

The outputSWFTEXTRECORD function in util/outputscript.c in libming = 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

CVE-2017-16883

The outputSWFTEXTRECORD function in util/outputscript.c in libming = 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

CVE-2017-16883

The CVE-2017-16883 entry concerns libming

CVE-2017-16883: NULL Pointer Dereference

The outputSWFTEXTRECORD function in util/outputscript.c in libming = 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file...

UBUNTU-CVE-2017-1000174

In SWFTools, an address access exception was found in swfdump swfGetBits...

PT-2017-10871

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description An address access exception was found in the swfdump function swf GetBits. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...