57 matches found
CVE-2015-2371: Undefined Security Weakness
The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...
Adobe Flash Player ActionScript 3 Memory Misreference Vulnerability
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in the 'ByteArray' class in the ActionScript 3 AS3 implementation of...
UBUNTU-CVE-2015-5119
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...
wpa_supplicant security and enhancement update
1:2.0-17 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1222015 1:2.0-16 - P2P: Validate SSID element length before copying it CVE-2015-1863 1:2.0-15 - Add domainmatch config option from upstream rh 1178263 - Include peer certificate in EAP events for use by clients...
Adobe Flash Player Action Script Evasion (CVE-2015-0310; CVE-2015-0311)
Flash files can contain malicious Action Script code to exploit vulnerabilities in Adobe Flash Player. Certain evasion tools can use evasion techniques in order to circumvent inspection by security software. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
wpa_supplicant security update
1:2.0-13 - Use osexec for action script execution CVE-2014-3686...
openSUSE Security Update : wpa_supplicant (openSUSE-SU-2014:1314-1)
add 0001-Add-osexec-helper-to-run-external-programs.patch - add 0002-wpacli-Use-osexec-for-action-script-execution.pat ch - fixing CVE-2014-3686 bnc900611 trying to abuse the action scripts in wpacli %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Facebook Popup Trigger (Turn your visitors to visit your sites automatically)
To all spammy, you couldn't share your flagged links on facebook? Don't worry, with this instruction, you can by pass to share the link. This is not just only about bypass of linkshrim. This is all about opening Popup of any of your pages to open for your visitors as well. All you need is "https"...
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
No description provided by source. Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is...
flash-plugin: critical flaws fixed in APSB11-26
Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors...
Adobe Flash Player 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
Adobe Flash Player 10.1.53.64 - Action Script Type Confusion ASLR + DEP Bypass Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploi...
Adobe Flash Player < 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is based on Haifei-li presentation at...
Adobe Flash Player - AVM Bytecode Verification (Metasploit)
$Id: adobeflashplayeravm.rb 12091 2011-03-23 04:41:48Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Adobe Flash Player AVM Bytecode Verification
$Id: adobeflashplayeravm.rb 12091 2011-03-23 04:41:48Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
flash-plugin: multiple code execution flaws (APSB11-02)
Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than CVE-2011-0559,...
Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability
Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT12-09-2006 ============================================================ Adobe/Macromedia Flash Player - Remote Code Execution ============================================================ Advisory Date...
Crtical Shockwave Embeded XSS Execution
The critical bug Shockwave videos allows to embebded code execution... This code can be XSS or activex mechanism. The victim cant understand because it ll executed background of real video without any redirection or url spoofing.. ====================================== Source Code: There is there...