26493 matches found
PT-2020-10755
Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1 Description An issue was discovered in LG Advanced Flash LAF that results in a buffer overflow. This issue affects LG mobile devices running Android OS versions 7.0 through 8.1...
CVE-2019-20782: Buffer Copy without Checking Size of Input
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. LG Advanced Flash LAF has a buffer overflow. The LG ID is LVE-SMP-190001 March 2019...
PT-2020-2633
Name of the Vulnerable Software and Affected Versions Thunderbolt devices affected versions not specified Description The issue is related to errors in the implementation of the SPI Flash interface in Thunderbolt device microcontrollers. Exploitation of this issue could allow an attacker to gain...
Google Android f2fs component buffer overflow vulnerability
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. f2fs is a flash file system component of Android. A buffer overflow vulnerability exists in the f2fs component of Android, which can be exploited by an attacker to obtain information...
Information Disclosure
The kdebase is vulnerable to information disclosure. A problem with the interaction between the Flash Player and the Konqueror web browser was found. The problem could lead to key presses leaking to the Flash Player applet instead of the browser...
F2fs-tools fsck.f2fs sanity_check_area_boundary code execution vulnerability
Summary An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...
WHO COVID-19 Mobile App: Probably unexploitable XSS via Header Injection
Summary: The Who-Platform header is reflected in the output of the page if it's not one of the recognized Who-Platform values IOS, ANDROID, WEB. While this is probably no longer exploitable as of 2015, it may be exploitable on less well implemented browsers not Chrome/Firefox/Edge. In general,...
Holy water: ongoing targeted water-holing attack in Asia
On December 4, 2019, we discovered watering hole websites that were compromised to selectively trigger a drive-by download attack with fake Adobe Flash update warnings. This campaign has been active since at least May 2019, and targets an Asian religious and ethnic group. The threat actor's...
CVE-2019-19912
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
CVE-2019-19912
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
Cross site scripting
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
CVE-2019-19912
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
CVE-2019-19912
Intland codeBeamer ALM
CVE-2019-19912: Improper Neutralization of Input During Web Page Generation
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
GLSA-202003-61 : Adobe Flash Player: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202003-61 Adobe Flash Player: Remote execution of arbitrary code A critical type confusion vulnerability was discovered in Adobe Flash Player. Impact : A remote attacker could possibly execute arbitrary code with the privileges of...
PT-2020-10292 · Intland · Codebeamer Alm
Name of the Vulnerable Software and Affected Versions: Intland codeBeamer ALM versions 9.5 and earlier Description: A cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF...
Adobe Flash Player: Remote execution of arbitrary code
Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description A critical type confusion vulnerability was discovered in Adobe Flash Player. Impact A remote attacker could possibly execute arbitrary code with the...
Hardware Router CTF
Here at Pen Test Partners we love hardware and also love a good CTF. So here's how I figured out my way through the hardware CTF that PTP set as a pre-requisite for some interviews. I'm pretty new to hardware, so learned quite a bit along the way. We have now moved on to a new 'interview' CTF so,...
The Sleuth Kit (TSK) Stack Buffer Overflow Vulnerability
The Sleuth Kit TSK is a set of command line tools and a C library that lets you analyze disk images and recover files from them. A stack buffer overflow vulnerability exists in the YAFFS file timestamp parsing logic of yaffsfsistat in fs/yaffs.c in The Sleuth Kit TSK 4.8.0 and earlier. No detaile...
