animaxplus.co.kr XSS vulnerability

Vulnerable URL: http://animaxplus.co.kr/index.php/m/content/animation?category1=5"...

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this feature after release in the RefreshDriverTimer::TickDriver function of the SMIL animation controller in Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors operating remotely to execute arbitrary code or cause service failures errors related to dynamic memory...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this feature after release in the RefreshDriverTimer::TickDriver function of the SMIL animation controller in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when dealing with dynamic memory. This is done by using...

Animation Weather Cool widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Animation Weather Cool widget published at the 'play' market has multiple vulnerabilities...

FlipaClip - Cartoon animation - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application FlipaClip - Cartoon animation published at the 'play' market has multiple vulnerabilities...

Sailing simulation ANIMATION - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Sailing simulation ANIMATION published at the 'play' market has multiple vulnerabilities...

光之美少女@動漫Club - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application 光之美少女@動漫Club published at the 'play' market has multiple vulnerabilities...

Patch now! Adobe releases Emergency Security Updates for Flash Player

The Adobe Flash Player just said goodbye to the year with another bunch of vulnerability patches. Adobe released an out-of-band security update on Monday to address Nineteen 19 vulnerabilities in its Flash Player, including one CVE-2015-8651 that is being exploited in the wild. All the programmin...

Adobe to Kill 'FLASH', but by Just Renaming it as 'Adobe Animate CC'

Adobe is Finally Killing FLASH, but not actually. Adobe Flash made the Internet a better place with slick graphics, animation, games and applications, but it never stood a chance of surviving in the same world as HTML5. Of course, Flash has plagued with various stability and security issues, whic...

CVE-2015-8028

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...

CVE-2015-8028

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...

SAP 3D Visual Enterprise Viewer Flic Animation Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure.

The vulnerability of the AnimationThread function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using the incorrect sscanf argument...

The vulnerability of the iOS operating system, which allows a hacker to gain access to the swap space

The vulnerability of CoreAnimation in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the swap buffer through a specially crafted application that runs in the background...

UBUNTU-CVE-2015-7176

The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impa...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

UBUNTU-CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

Apple Mac OS X CoreAnimation Memory Misreference Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. A memory misreference vulnerability in Apple Mac OS X CoreAnimation allows an attacker to construct a malicious WEB site and trick users into parsing it, which could execute arbitrary code...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via unsafe svg animation tags. Details Exploit Example: html Here the anchor's href is animated, starting from a value that's a javascript URI. This allows execution of arbitrary javascript in the process...