26493 matches found
Hacking Hardware Password Managers: The RecZone
TL:DR Hardware security can be difficult to fathom, so I set out to research three password vaults as a newbie, sharing my findings. I picked three popular hardware vaults, each with different components, requiring different skills and equipment. Here's how I learned about disassembly, chipset...
Hacking Hardware Password Managers: passwordsFAST
TL:DR Taking three hardware password managers I used them to: Learn the basics of hardware hacking Practice disassembling Perform chipset research Understand pinouts and protocols Read data off each device The passwordFast device uses different ways to store the data on a flash chip with a...
Hacking Hardware Password Managers: Royal Vault Password Keeper
TL;DR: Taking three hardware password managers I used them to: Learn the basics of hardware hacking Practice disassembling Perform chipset research Understand pinouts and protocols Read data off each device The royal password vault boards looked to be reused from a previous hardware device with...
OS Command Injection
Ansible is vulnerable to OS command injection. The attack is possible because the module nxosfilecopy does not validate the remotefile parameter and directly uses the filenames from the parameter to copy files to a flash or bootflash on NXOS devices, allowing an attacker to inject malicious comma...
GLSA-201911-05 : Adobe Flash Player: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201911-05 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...
Adobe Flash Player: Multiple vulnerabilities
Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact Please review th...
CVE-2019-17391
An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker with physical access to the device to read the contents of read-protected eFuses, such as flash encryption and...
CVE-2011-0544
phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...
Design/Logic Flaw
phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...
CVE-2011-0544
CVE-2011-0544 affects phpBB 3.0.x–3.0.6 with an XSS vulnerability via the [flash] BB tag . The available documents consistently identify this issue in phpBB 3.0.x–3.0.6, but provide no explicit root-cause details, affected components beyond the flash tag, exploit status, or remediation (patch/ver...
CVE-2011-0544
phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...
CVE-2014-1214
views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...
CVE-2014-1214
views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...
CVE-2014-1214
The CVE affects Projoom’s NovaSFH (Smart Flash Header) Joomla! plugin, specifically the views/upload.php upload handler in version 3.0.2 and earlier. The root cause is lack of validation in the file upload path, allowing a crafted dest parameter and a Filename extension to upload and execute arbi...
PT-2019-6611
Name of the Vulnerable Software and Affected Versions phpBB versions 3.0.x through 3.0.6 Description The issue allows for an XSS attack via the flash BB tag. Recommendations For versions 3.0.x through 3.0.6, update to a version that fixes this issue. At the moment, there is no information about a...
PT-2019-7074
Name of the Vulnerable Software and Affected Versions ProJoom Smart Flash Header NovaSFH component versions 3.0.2 and earlier for Joomla! Description The issue allows remote attackers to upload and execute arbitrary files. This is achieved via a crafted dest parameter and an arbitrary extension i...
Adobe Animate Code Issue Vulnerability
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate has a code issue vulnerability. An attacker can exploit this vulnerability to elevate privileges...
CVE-2011-0544: Improper Neutralization of Input During Web Page Generation
phpbb 3.0.x-3.0.6 has an XSS vulnerability via the flash BB tag...
CVE-2014-1214: Unrestricted Upload of File with Dangerous Type
views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...