Flash Player -- multiple vulnerabilities

Adobe reports: These updates resolve memory corruption vulnerabilities that could lead to remote code execution CVE-2017-11281, CVE-2017-11282...

KLA11103 Multiple arbitrary code execution vulnerabilities in Adobe Flash Player

Multiple serious memory corruption vulnerabilities have been found in Adobe Flash Player versions earlier than 27.0.0.130. Malicious users can exploit these vulnerabilities to execute arbitrary code. NB: These vulnerabilities does not have any public CVSS ratings, so overall rating can be changed...

KLA11104 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA11103. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe Flash...

Adobe Flash Player Memory Corruption (APSB17-28: CVE-2017-11282)

A memory corruption vulnerability exists in Adobe Flash player. The vulnerability is due to an error in the text handling functionality. A remote attacker can exploit this vulnerability by enticing the user to open a crafted SWF file...

Adobe Flash Player <= 26.0.0.151 Multiple Vulnerabilities (APSB17-28)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 26.0.0.151. It is, therefore, affected by multiple vulnerabilities : - An unspecified memory corruption flaw exists that is caused by input not being properly validated. An unauthenticated, remote...

Adobe Flash Player for Mac <= 26.0.0.151 Multiple Vulnerabilities (APSB17-23)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 26.0.0.151. It is, therefore, affected by multiple vulnerabilities : - An unspecified memory corruption flaw exists that is caused by input not being properly validated. An unauthenticate...

flash-game.cc XSS vulnerability

Open Bug Bounty ID: OBB-291372 Description| Value ---|--- Affected Website:| flash-game.cc Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

IDN Homograph Attack Spreading Betabot Backdoor

An IDN homograph attack leveraging Adobe’s brand has been discovered, with the malicious site spreading the Betabot backdoor and ultimately infecting compromised machines with cryptocurrency-mining and data-stealing malware. Attacks using internationalized domain name homographs rely on users...

For Youtube advanced Flash vulnerability bug research-vulnerability warning-the black bar safety net

A, media Flash is still a lively intimidating origin. In 2017, I isolated to Facebook, Youtube, WordPress, Yahoo, Paypal and Stripe to submit a Flash flaws. In the past 3 years, I to the flaws winning the narratives presented across 50 Flash flaws, get across the 80k dollar awards. Since Spirit i...

kune.cc XSS vulnerability

Vulnerable URL: https://kune.cc/ws/gxt/chart/open-flash-chart.swf?get-data=functionalert/Openbugbounty/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5260861 VIP website status:| ...

viklfoto.ru XSS vulnerability

Vulnerable URL: http://viklfoto.ru/flash/1/Photo%20Anatoliya/Photo%20Anatoliya1/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY'=noflash.html=7=0=0=false=AFQjCNHL889eUgZsX-kcR-5U-NB2LLRA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017...

utilife.com.br XSS vulnerability

Vulnerable URL: http://www.utilife.com.br/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY'=utialternate.html=6=0=0=false=AFQjCNF9tQSNgVo-q5QvN4zJfebZJn3UsA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability...

rfes.utrgv.edu XSS vulnerability

Vulnerable URL: https://rfes.utrgv.edu/images/ofc/open-flash-chart.swf?get-data=functionalert/Openbugbounty/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

brooks.chem.lsa.umich.edu XSS vulnerability

Open Bug Bounty ID: OBB-289187 Description| Value ---|--- Affected Website:| brooks.chem.lsa.umich.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nebraska.edu XSS vulnerability

Vulnerable URL: https://nebraska.edu/docs/budget/open-flash-chart.swf?get-data=functionalert/Openbugbounty/ Details: Description| Value ---|--- Patched:| Yes, at 04.12.2017 Latest check for patch:| 04.12.2017 16:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

arbfile.org XSS vulnerability

Open Bug Bounty ID: OBB-288256 Description| Value ---|--- Affected Website:| arbfile.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bankinter.com XSS vulnerability

Vulnerable URL: https://www.bankinter.com/www/es-es/cmdinicio/cmdsmv/demobroker/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY'=DemoBROKERalternate.html=7=0=0=false=AFQjCNEf0AdDP0GDS-XWpVnRCMGY8t1TbQ Details: Description| Value ---|--- Patched:| Yes, at 02.10.2017 Latest check...

Flash Poker 2.0 - game SQL Injection

Flash Poker 2.0 - game SQL Injection Exploit Title: Flash Multiplayer Poker PHP Script 2.0 - SQL Injection Dork: N/A Date: 28.08.2017 Vendor Homepage: http://www.flashpoker.it/ Software Link: https://www.codester.com/items/559/flash-poker-v2-multiplayer-poker-php-script Demo:...

SQL Injection Vulnerability in Flash cms /zj/html.asp Page

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Flash cms /zj/html.asp page. The vulnerability stems from the program's failure to effectively filter user-submitted data. An attacker can exploit the...

Flash Poker 2.0 - 'game' SQL Injection

Exploit Title: Flash Multiplayer Poker PHP Script 2.0 - SQL Injection Dork: N/A Date: 28.08.2017 Vendor Homepage: http://www.flashpoker.it/ Software Link: https://www.codester.com/items/559/flash-poker-v2-multiplayer-poker-php-script Demo: http://www.flashpoker.it/index/ Version: 2.0 Category:...