26493 matches found
Design/Logic Flaw
A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...
CVE-2020-3477 Cisco IOS and IOS XE Software Information Disclosure Vulnerability
A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...
CVE-2020-3477
CVE-2020-3477 affects Cisco IOS and IOS XE CLI parser. An authenticated, local attacker could obtain read-only access to files on the flash: filesystem due to insufficient command restrictions. Exploitation is local with no user interaction beyond authentication. Cisco’s advisory and related Ness...
Cisco IOS and IOS XE Software Information Disclosure Vulnerability
A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...
CVE-2020-3477: Improper Input Validation
A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker...
PT-2020-13626 · Espressif · Esp32
Name of the Vulnerable Software and Affected Versions: ESP32 affected versions not specified Description: The issue concerns bypassing Secure Boot and Flash Encryption on ESP32 chips. It allows extracting decrypted flash data from a fully protected ESP32 chip using chip-level weaknesses, without...
PT-2020-14144 · Espressif · Esp32
Name of the Vulnerable Software and Affected Versions: Espressif ESP32 affected versions not specified Description: The issue concerns bypassing flash encryption by leveraging a design weakness in combination with EMFI. This allows for potential unauthorized access to encrypted data. There is no...
Hackers Target Porn Site Visitors Using Flash and Internet Explorer
Plus: Ransomware holds up schools, Zoom adds two-factor, and more of the week's top security news...
KLA11814 Use after free vulnerability in Adobe Flash Player
Use after free vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-30 Exploitation Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list CVE-2020-9633...
Code injection
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...
CVE-2020-8341
The CVE-2020-8341 entry concerns Lenovo ThinkPad BIOS/System Management Mode (SMM) protection. After resuming from S3 sleep on various BIOS versions, SPI Protected Range Registers (PRx) may not be set, but this does not undermine SMM BIOS Write Protection. The vulnerability centers on the PRx sig...
GHSA-8C8C-4VFJ-RRPC Reflected Cross-Site Scripting in redis-commander
Affected versions of redis-commander contain a cross-site scripting vulnerability in the highlighterId paramter of the clipboard.swf component on hosts serving Redis Commander. Mitigating factors: Flash must be installed / enabled for this to work. The below proof of concept was verified to work...
Apple mistakenly approved malware camouflaged as Adobe Flash Player
By Deeba Ahmed Apple approved nasty Shlayer malware that mimicked Adobe Flash Player update on macOS. This is a post from HackRead.com Read the original post: Apple mistakenly approved malware camouflaged as Adobe Flash Player...
CVE-2020-24034: Deserialization of Untrusted Data
Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sessid, nonce, and ha1 values inside of the serialized session cookie, an attacker may...
PT-2020-15625
Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 5280 version 1.150.61 Description The issue allows any authenticated user to perform a privilege escalation to any other user due to insecure deserialization. By making a request with valid sess id, nonce, and ha1 values inside o...
PT-2020-21152
Name of the Vulnerable Software and Affected Versions redis-commander versions affected versions not specified Description The issue is related to a cross-site scripting vulnerability in the highlighterId parameter of the clipboard.swf component. This vulnerability can be exploited when Flash is...
GHSA-363H-VJ6Q-3CMJ Rosetta-Flash JSONP Vulnerability in hapi
This description taken from the pull request provided by Patrick Kettner. Versions 6.1.0 and earlier of hapi are vulnerable to a rosetta-flash attack, which can be used by attackers to send data across domains and break the browser same-origin-policy. Recommendation - Update hapi to version 6.1.1...
Rosetta-Flash JSONP Vulnerability in hapi
This description taken from the pull request provided by Patrick Kettner. Versions 6.1.0 and earlier of hapi are vulnerable to a rosetta-flash attack, which can be used by attackers to send data across domains and break the browser same-origin-policy. Recommendation - Update hapi to version 6.1.1...
