23887 matches found
Adobe Flash Player Use After Free Code Execution (APSB16-32: CVE-2016-6987)
A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...
Magento CMS Flash File Upload Cross-Site Scripting Vulnerability
Magento CMS is an open source PHP e-commerce content management system CMS of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions . An upload cross-site scripting vulnerability exists in Magento CMS Flash files, which c...
Adobe Flash Player Memory Corruption (APSB16-32: CVE-2016-6985)
A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Automattic: Wordpress.com REST API oauth bypass via Cross Site Flashing
Hello Automattic Security Team, There is a vulnerability in https://public-api.wordpress.com/crossdomain.xml. This file allows .yahoo.com and .yimg.com to perform cross domain requests to https://public-api.wordpress.com. However, these domains are vulnerable to Cross-Site flashing. An attacker c...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09453)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by the user to crash the application or execute arbitrary...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09452)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by the user to crash the application or execute arbitrary...
Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2016-09443)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory error referencing arbitrary code execution vulnerability that can be exploited by remote attackers to construct a malicious SWF file, which can be parsed by the user to crash...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09449)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by the user to crash the application or execute arbitrary...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09450)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by the user to crash the application or execute arbitrary...
Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2016-09442)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. A type confusion vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by users to execute arbitrary code...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09451)
Adobe Flash Player is a cross-platform, browser-based multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF files that can be parsed by the user to crash the application or execute arbitrary...
fergusonspetsupplies.co.uk XSS vulnerability
Vulnerable URL: http://www.fergusonspetsupplies.co.uk/ekmps/shops/fergusonspet/resources/Flash/cooper-black-bt.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...
foto-edelmann.de XSS vulnerability
Vulnerable URL: http://www.foto-edelmann.de/tlfiles/flash/coppergb.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Flash Player < 11.2.202.637 / 18.0.0.382 / 23.0.0.185 Multiple Vulnerabilities (APSB16-32)
Binary data 9685.prm...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09455)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09456)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-09454)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory corruption vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...
Adobe Flash Player Use After Free Code Execution (APSB16-32: CVE-2016-6981)
A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...
CVE-2016-6992
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."...
CVE-2016-6992
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."...