Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08284)

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the data, program, and function file permissions functions in Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. An attacker could exploit th...

Denial of Service Vulnerability in Multiple Intel Products

Intel 5th generation Intel Core Processors are different series of CPU Central Processing Unit products of Intel Corporation. A security vulnerability exists in the SPI Flash configuration in the platform on multiple Intel products. A local attacker could exploit this vulnerability to cause a...

Adobe Flash 28.0.0.161 - Use-After-Free

Adobe Flash 28.0.0.161 - Use-After-Free !/usr/bin/env python coding: UTF-8 import BaseHTTPServer import sys from SimpleHTTPServer import SimpleHTTPRequestHandler print "@Syfi2k" print "+ CVE-2018-4878 poc " print "--------------------------------" print "Calc.exe Shellcode via Msfvenom" print...

Adobe Flash < 28.0.0.161 - Use-After-Free

!/usr/bin/env python coding: UTF-8 import BaseHTTPServer import sys from SimpleHTTPServer import SimpleHTTPRequestHandler print "@Syfi2k" print "+ CVE-2018-4878 poc " print "--------------------------------" print "Calc.exe Shellcode via Msfvenom" print "Based on fixed version...

Fake Software Update Abuses NetSupport Remote Access Tool

Over the last few months, FireEye has tracked an in-the-wild campaign that leverages compromised sites to spread fake updates. In some cases, the payload was the NetSupport Manager remote access tool RAT. NetSupport Manager is a commercially available RAT that can be used legitimately by system...

Exploit for Use After Free in Adobe Flash_Player

CVE-2018-4878 Flash Exploit Poc ' quick and dirty' For more...

Adobe Flash 28.0.0.137 Remote Code Execution Exploit

Adobe Flash versions 28.0.0.137 and below remote code execution proof of concept exploit. !/usr/bin/env python coding: UTF-8 import BaseHTTPServer import sys from SimpleHTTPServer import SimpleHTTPRequestHandler print "@Syfi2k" print "+ CVE-2018-4878 poc " print "--------------------------------"...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

Adobe Flash 28.0.0.137 Remote Code Execution

!/usr/bin/env python coding: UTF-8 import BaseHTTPServer import sys from SimpleHTTPServer import SimpleHTTPRequestHandler print "@Syfi2k" print "+ CVE-2018-4878 poc " print "--------------------------------" print "Calc.exe Shellcode via Msfvenom" print "Based on fixed version...

Code injection

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service...

CVE-2017-5703

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service...

CVE-2017-5703

CVE-2017-5703 concerns Intel SPI Flash controller configuration that can let a local attacker alter SPI flash behavior, potentially causing DoS. Connected advisories confirm impact on Intel-based platforms and related vendor responses. IBM’s bulletin lists affected IBM/UEFI firmware and concrete ...

CVE-2017-5703

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service...

Unsafe Opcodes exposed in Intel SPI based products

Summary: Configuration of SPI Flash in platforms based on multiple Intel CPUs allows a local attacker to alter the behavior of the SPI Flash, potentially leading to a Denial of Service. This issue has been root-caused, and the mitigation has been validated and is available. Description:...

Updated flash-player-plugin packages fix security vulnerability

It was found that flash versions older than 29.0.0.113 contained a use after free vulnerability that could lead to remote code execution CVE-2018-4919. A second vulnerability was a type confusion which could also lead to remote code execution CVE-2018-4920...

MGASA-2018-0189 Updated flash-player-plugin packages fix security vulnerability

It was found that flash versions older than 29.0.0.113 contained a use after free vulnerability that could lead to remote code execution CVE-2018-4919. A second vulnerability was a type confusion which could also lead to remote code execution CVE-2018-4920...

[SECURITY] Fedora 28 Update: ming-0.4.8-8.fc28

Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...

UBUNTU-CVE-2018-9132

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...