Flash Player -- Remote code execution

Adobe reports: This update resolves a type confusion vulnerability that could lead to remote code execution CVE-2017-11292...

[ASA-201710-20] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-20 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-449 Summary ======= The package flashplug...

[ASA-201710-21] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201710-21 ========================================== Severity: Critical Date : 2017-10-16 CVE-ID : CVE-2017-11292 Package : lib32-flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-450 Summary ======= The package...

ulyd.bek.no XSS vulnerability

Vulnerable URL: http://ulyd.bek.no/f-train/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

Radancy: xss flash on http://presentatie.werkenbijmcdonalds.nl/

A vulnerability in a flash file caused javascript to be executed in banners hosted on presentatie.werkenbijmcdonalds.nl...

t.millenniemalen.nu XSS vulnerability

Open Bug Bounty ID: OBB-337888 Description| Value ---|--- Affected Website:| t.millenniemalen.nu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pieps.ducky.nl XSS vulnerability

Vulnerable URL: http://pieps.ducky.nl/diploma-uitreiking/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

trouwenmetnaaldenkraak.nl XSS vulnerability

Vulnerable URL: http://trouwenmetnaaldenkraak.nl/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

p3c.nl XSS vulnerability

Vulnerable URL: http://p3c.nl/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

wunnik.nl XSS vulnerability

Vulnerable URL: http://www.wunnik.nl/Mark/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

zwerfafvalservice.nl XSS vulnerability

Open Bug Bounty ID: OBB-337880 Description| Value ---|--- Affected Website:| zwerfafvalservice.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tinekevangeel.nl XSS vulnerability

Open Bug Bounty ID: OBB-337875 Description| Value ---|--- Affected Website:| tinekevangeel.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lydwien.nl XSS vulnerability

Vulnerable URL: http://www.lydwien.nl/viool/flash/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

puurnatuur.nl XSS vulnerability

Vulnerable URL: http://www.puurnatuur.nl/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

vermeren.net XSS vulnerability

Vulnerable URL: http://www.vermeren.net/halikarnas/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

markus-hoppe.net XSS vulnerability

Open Bug Bounty ID: OBB-337843 Description| Value ---|--- Affected Website:| markus-hoppe.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-domain Flash Injection (XSF)

WordPress is vulnerable to cross-domain flash injection XSF attacks. The attack can be triggered via the code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file. The vulnerability is possible only when domain-based flashmediaelement.swf sandboxing is not used...

co-creator.net XSS vulnerability

Open Bug Bounty ID: OBB-336661 Description| Value ---|--- Affected Website:| co-creator.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

go-smoking.net XSS vulnerability

Open Bug Bounty ID: OBB-336659 Description| Value ---|--- Affected Website:| go-smoking.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

educacional.net XSS vulnerability

Vulnerable URL: http://www.educacional.net/comum/detectaflash/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...