PT-2018-1443

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 28.0.0.161 Description The issue is related to a use-after-free vulnerability, which occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. This can allo...

chimneypiecedesigner.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429603 Description| Value ---|--- Affected Website:| chimneypiecedesigner.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

educacional.net XSS vulnerability

Vulnerable URL: http://www.educacional.net/comum/detectaflash/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

ww.bouyguesstroi.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-327956 Description| Value ---|--- Affected Website:| ww.bouyguesstroi.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

laguardia.edu Open Redirect vulnerability

Vulnerable URL: https://www.laguardia.edu/difficultdialogues/visitor/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:|...

viden.jp.dk Open Redirect vulnerability

Open Bug Bounty ID: OBB-327309 Description| Value ---|--- Affected Website:| viden.jp.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

lsv-ohz.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-325985 Description| Value ---|--- Affected Website:| lsv-ohz.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

mugmetdegoudentand.nl Open Redirect vulnerability

Vulnerable URL: http://www.mugmetdegoudentand.nl/mugme/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclos...

Adobe Flash Player for Mac <= 26.0.0.151 Multiple Vulnerabilities (APSB17-23)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 26.0.0.151. It is, therefore, affected by multiple vulnerabilities : - An unspecified memory corruption flaw exists that is caused by input not being properly validated. An unauthenticate...

Flash cms \module\html\h001\data.asp page SQL injection vulnerability

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Flash cms \module\html\h001\data.asp page. The vulnerability stems from the program's failure to filter the data submitted by the user. An attacker can...

Apache OpenMeetings Untrusted Domain Loading Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security vulnerability exists in Apac...

CVE-2017-7680

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains...

CVE-2017-7680

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains...

Design/Logic Flaw

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains...

CVE-2017-7680: Undefined Security Weakness

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains...

Flash cms /wap has multiple SQL Injection Vulnerabilities

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a SQL injection vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, which can be exploited by attackers to obtain sensitive database information...

Shining Flash cms Frontend Arbitrary User Login Vulnerability

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a front-end arbitrary user login vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, an attacker can use the vulnerability to bypass authentication t...

serveurduke.fr XSS vulnerability

Vulnerable URL: http://www.serveurduke.fr/AIDES/THEME-TICE/INTERNET-format flash-3TI1/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

MS16-141: Security Update for Adobe Flash Player (3202790)

The remote Windows host is missing KB3202790. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to visit a website containing specially crafted Flash content...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Adobe Pepper Flash for Google Chrome due to an incorrect limitation of the SWF file format. Exploiting this vulnerability allows malicious actors to carry out attacks on endpoints using JSONP requests through Cross-Site Request Forgery CSRF. These actors can gain acces...