23900 matches found
virginia.edu XSS vulnerability
Open Bug Bounty ID: OBB-564731 Description| Value ---|--- Affected Website:| virginia.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mgcfs.jp XSS vulnerability
Open Bug Bounty ID: OBB-564721 Description| Value ---|--- Affected Website:| mgcfs.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
APT37 (Reaper): The Overlooked North Korean Actor
On Feb. 2, 2018, we published a blog detailing the use of an Adobe Flash zero-day vulnerability CVE-2018-4878 by a suspected North Korean cyber espionage group that we now track as APT37 Reaper. Our analysis of APT37’s recent activity reveals that the group’s operations are expanding in scope and...
Rockstar Games: SocialClub's Facebook OAuth Theft through Warehouse XSS.
In this report, the researcher was able to chain together 3 separate, minor bugs to create an exploit that was greater than the sum of its parts. This exploit could have potentially allowed attackers to steal OAuth tokens from users. The exploit chain involved taking advantage of our SSO between...
southcom.mil XSS vulnerability
Open Bug Bounty ID: OBB-560284 Description| Value ---|--- Affected Website:| southcom.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
nationalguard.mil XSS vulnerability
Open Bug Bounty ID: OBB-560280 Description| Value ---|--- Affected Website:| nationalguard.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of the Flash Player software, which relates to reading data outside of the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software is related to the reading of data outside the buffer in memory during the processing of AdobePSDK metadata. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Flash Player software, caused by a full overflow of data, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software arises from a numerical overflow that occurs during the creation of raster images. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the Primetime SDK component of the Flash Player software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the Primetime SDK software platform’s Flash Player component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Flash Player software, which relates to reading data outside of the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Flash Player software is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Primetime SDK component of the Flash Player software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the Primetime SDK software platform’s Flash Player component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
marines.mil XSS vulnerability
Open Bug Bounty ID: OBB-559275 Description| Value ---|--- Affected Website:| marines.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Microsoft Patch Tuesday, February 2018 Edition
Microsoft today released a bevy of security updates to tackle more than 50 serious weaknesses in Windows, Internet Explorer/Edge, Microsoft Office and Adobe Flash Player, among other products. A good number of the patches issued today ship with Microsoft's "critical" rating, meaning the problems...
February Patch Tuesday – 55 Microsoft vulnerabilities patched, 45 for Adobe
For this month's Patch Tuesday, Microsoft has released patches covering 55 vulnerabilities, with 15 ranked as critical. This includes out-of-band Office patches from mid-January as well as patches for Adobe Flash that were released last week. From this list, there are patches for a vulnerability...
February 13, 2018—KB4074590 (OS Build 14393.2068)
None None...
Flash ActiveX 18.0.0.194 - Code Execution
Flash ActiveX 18.0.0.194 - Code Execution CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44742.swf...
Flash ActiveX 18.0.0.194 - Code Execution
CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44742.swf...
A week in security (February 5 – February 11)
Last week on Malwarebytes Labs, we featured a new Flash Player zero-day that has been found in recent targeted attacks. And we talked about a new trick to cripple browsers that came out of the hat of tech support scammers. We also covered several methods of stealing cryptocurrencies, including on...
jnlwp.defense.gov XSS vulnerability
Open Bug Bounty ID: OBB-556973 Description| Value ---|--- Affected Website:| jnlwp.defense.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
OpenEMR open-flash-chart.swf and _posteddata.php files cross-site scripting vulnerability
OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in the open-flash-chart.swf a...