Adobe Flash Player End of Life (EOL) Detection

The Adobe Flash Player on the remote host has reached the end of life EOL / is discontinued and should not be used anymore. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index

Question What Technotes exist for the IBM Security Network Protection / IBM QRadar Network Security XGS sensor? Answer The content below includes a list of all technical notes published under IBM Security Network Protection / IBM QRadar Network Security by category and sorted by popularity. Users...

f2fs-tools: Multiple vulnerabilities

Background Tools for Flash-Friendly File System F2FS. Description Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

Patch Tuesday - January 2021

We arrive at the first Patch Tuesday of 2021 2021-Jan with 83 vulnerabilities across our standard spread of products. Windows Operating System vulnerabilities dominated this month's advisories, followed by Microsoft Office which includes the SharePoint family of products, and lastly some from les...

Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content

Adobe Systems has patched seven critical vulnerabilities, which impact Windows, macOS and Linux users. The impact of the serious flaws range from arbitrary code execution to sensitive information disclosure. The software company’s regularly scheduled Tuesday security updates impact a slew of its...

January 12, 2021—KB4598278 (Monthly Rollup)

None None...

January 12, 2021—KB4598285 (Monthly Rollup)

None None...

January 12, 2021—KB4598243 (OS Build 14393.4169) - EXPIRED

None None...

January 12, 2021—KB4598275 (Security-only update)

None None...

January 12, 2021—KB4598297 (Security-only update)

None None...

January 12, 2021—KB4598231 (OS Build 10240.18818) - EXPIRED

None None...

January 12, 2021—KB4598230 (OS Build 17763.1697) - EXPIRED

None None...

January 12, 2021—KB4598242 (OS Builds 19041.746 and 19042.746)

None None...

January 12, 2021—KB4599208 (OS Build 15063.2614)

None None...

A week in security (January 4 – January 10)

Last week on Malwarebytes Labs, we released survey results about VPN usage and found that 36 percent of our respondents use it. We also talked about Adobe Flash Player reaching its end of life—meaning, Adobe wont be supporting the updating and patching of its Flash Player software; covered the...

Adobe Flash Player reaches end-of-life

“What now? My farm is no longer working. Can you have a look, honey?” Like millions of other people my wife likes to play online browser games. You know, the ones that don’t require a fast connection because your virtual life is not in constant danger, and an occasional harvest is enough to make...

Information Disclosure

Adobe Flash Player is vulnerable to information disclosure. An attacker can make use of Same Origin Policy Bypass vulnerability to access critial information...

Adobe Flash Player Reaches End of Life on December 31, 2020

In July 2017, Adobe announced that Adobe Flash Player will reach “End of Life” EOL on Thursday, December 31, 2020. After this date, Adobe Flash Player will no longer be supported or distributed by Adobe. Adobe says that once Flash reaches its EOL date, there will be no further updates or security...

Serious Vulnerabilities in Dualog Connection Suite

TL;DR The flaws found in this maritime comms and connection suite were many, and not insignificant: Directory traversal 2FA challenge/response is performed in a client-side application Default install password SQL injection User data leakage Easily brute forcible password hashes Introduction Duri...

Adobe Flash Player Chrome Unauthorized Access

The vulnerability of the Adobe Flash Player in the Google Chrome web browser exists due to incorrect processing of the HTTP Origin header. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...