Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 53 vulnerabilities, 11 of which are rated "critical," 40 that are rated "important” and one “moderate” and “low” vulnerability, each. The...

November 2018 Adobe Flash Security Update

This security update addresses the following vulnerability, which is described in Adobe Security Bulletin APSB18-39: CVE-2018-15978...

Security update for Adobe Flash Player: November 13, 2018

None None...

KLA11886 Microsoft Advisory for Adobe Flash

Original advisories ADV180025 APSB18-39 Related products Adobe-Flash CVE list KB list 4467694 Solution Install necessary updates from the KB section, that are listed in your Windows Update Windows Update usually can be accessed from the Control Panel Affected Products - Adobe Flash...

KLA11356 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player. For details look at KLA11352. Original advisories ADV180025 Related products Microsoft-Windows CVE list KB list 4467694 Solution Install necessary updates from the KB section, that are listed in your Windows Update Windows Upda...

Adobe Flash Player Out-of-bounds read (APSB18-39: CVE-2018-15978)

A out of bounds read vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

KB4467694: Security update for Adobe Flash Player (November 2018)

The remote Windows host is missing security update KB4467694. It is, therefore, affected by an information disclosure vulnerability in Adobe Flash Player. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid118917; scriptversion"1.4";...

Adobe Flash Player for Mac <= 31.0.0.122 (APSB18-39)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 31.0.0.122. It is therefore affected by an information disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid118908; scriptversion"1.5";...

Flash Player -- information disclosure

Adobe reports: This update resolves a out-of-bounds vulnerability that could lead to information disclosure CVE-2018-15978...

APSB18-39 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address an important vulnerability in Adobe Flash Player 31.0.0.122 and earlier versions. Successful exploitation could lead to information disclosure...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Adobe Acrobat and Reader, and Adobe Photoshop CC. An attacker could exploit these vulnerabilities to obtain access to sensitive information. NCCIC encourages users and administrators to review Adobe Security Bulletins...

Adobe Flash Player <= 31.0.0.122 (APSB18-39)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 31.0.0.122. It is therefore affected by an information disclosure vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

KLA11352 SUI vulnerability in Adobe Flash Player

Out-of-bounds read vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to spoof user interface. Technical details To update Adobe Flash Player ActiveX detected as Flash.ocx on Windows 8 and higher, install latest updates from Control Panel Original...

Decapping with Dave (chip decapping)

Thought I'd share my first attempt at chip decapping using the @LargeCardinal technique. I found using a gas soldering iron more flexible than a blowtorch. This is attempt number two, this time with an Atmel 328 MCU; this is almost a work of art. Blowtorch decapping try number 3. Firstly an STC M...

WordPress 4.5.x < 4.5.11 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...

WordPress 4.0.x < 4.0.20 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...

WordPress 3.7.x < 3.7.23 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...

WordPress 3.9.x < 3.9.21 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. - When domain-based...

WordPress 4.6.x < 4.6.10 MediaElement.js Flash Fallback XSS

According to its self-reported version number, the detected WordPress application is affected by a cross-site scripting vulnerability in the Flash fallback files in MediaElement under wp-includes/js/mediaelement. Note that the scanner has not tested for these issues but has instead relied only on...

WordPress 4.7.x < 4.7.9 MediaElement.js Flash Fallback XSS

According to its self-reported version number, the detected WordPress application is affected by a cross-site scripting vulnerability in the Flash fallback files in MediaElement under wp-includes/js/mediaelement. Note that the scanner has not tested for these issues but has instead relied only on...