Microsoft Silverlight CVE-2015-1715 Privilege Escalation Vulnerability

Description Microsoft Silverlight is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the application; this can result in the attacker gaining complete control of the affected system. Technologies Affected Microsof...

MS15-049: Vulnerability in Silverlight Could Allow Elevation of Privilege (3058985)

The version of Microsoft Silverlight installed on the remote host is affected by a privilege escalation vulnerability. A remote attacker can exploit this flaw, via a specially crafted Silverlight application, to execute arbitrary code with the same or higher level of permissions as the currently...

Microsoft Silverlight < 5.1.40416.00 Multiple Vulnerabilities (MS15-044 / MS15-049) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to improper handling of OpenType fonts by the Windows DirectWrite library. A remote attacker can exploit this vulnerability by convincin...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

Google Shuts Off NPAPI in Chrome

With the release of Chrome 42 this week, Google fixed more than 40 vulnerabilities. But the most significant security change in the new browser is Google’s decision to disable the NPAPI, essentially turning off plugins such as Java and Silverlight by default. The decision didn’t come out of...

VulnCheck KEV: CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before...

Oracle Fusion Middleware Security Service Information Disclosure (January 2015 CPU) (BEAST)

The version of Oracle HTTP Server installed on the remote host is affected by an information disclosure vulnerability, known as BEAST, in the SSL 3.0 and TLS 1.0 protocols due to a flaw in the way the initialization vector IV is selected when operating in cipher-block chaining CBC modes. A...

Report Companies Still Not Patching Security Vulnerabilities

The Cisco 2015 Annual Security Report is out and the findings are troubling as always: for every positive finding in the report, it seems, there is a negative finding, neutralizing any gains in the network security struggle. Chief information security officers say their security postures are stro...

New Adobe Flash Exploit Found in Angler, Fiesta EKs

Two notorious exploit kits are already seeding vulnerable websites with exploits for a Flash Player vulnerability that was patched in last week’s Adobe security bulletin. French researcher Kafeine told Threatpost that the most likely scenario is that a skilled coder found a way to reverse-enginee...

jQuery Official Website Compromised To Serve Malware

The official website of the popular cross-platform JavaScript library jQuery jquery.com has been compromised and redirecting its visitors to a third-party website hosting the RIG exploit kit, in order to distribute information-stealing malware. JQuery is a free and open source JavaScript library...

Archie Exploit Kit Spotted Leveraging Adobe, Silverlight Vulnerabilities

A relatively new exploit kit that borrows modules copied from the Metasploit Framework and exploits any older versions of Adobe Flash, Reader and, Silverlight the user may be using has begun to make the rounds. Jaime Blasco, the director of AlienVault Labs dug deeper into kit, known as Archie, on...

Malicious Advertisements Found on Java.com, Other High-Profile Sites

A New York-based online ad network company AppNexus, that provides a platform specializing in real-time online advertising, has again been spotted as the origin of a recent "malvertising" campaign that makes use of the Angler Exploit Kit to redirect visitors to malicious websites hosting the Aspr...

Java.com, TMZ Serving Malvertising Redirects to Angler Kit

Online ad network AppNexus has again been identified at the core of another malvertising campaign using the Angler Exploit Kit to redirect visitors to sites hosting the Asprox malware. Busy, popular websites including TMZ, Photobucket and Java.com in recent days have been serving malicious...

Update for Microsoft Silverlight (KB2977218)

This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...

Koler Android Ransomware Infrastructure Complex and Agile

While the Koler ransomware may be a simplistic money-generating malware scam, the infrastructure standing up its campaigns is anything but. Researchers at Kaspersky Lab published a report today that not only explained details of how the attackers—possibly the group behind the Reveton...

CVE-2014-4589

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

CVE-2014-4589

CVE-2014-4589 affects the WP Silverlight Media Player (wp-media-player) WordPress plugin 0.8 and earlier. The vulnerability resides in uploader.php and is triggered via the post_id parameter, allowing remote attackers to inject arbitrary web script or HTML (XSS). Mitigation: update the plugin to ...

CVE-2014-4589

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

Epiri Professional Web Browser 3.0 - Remote Crash Exploit

No description provided by source. ' Title: Epiri Professional Web Browser 3.0 Remote Crash Exploit ' Vendor: Horizon ' Product Web Page: http://www.horizonum.com/ ' Current Version: 3.0.0.00 ' Notiz: Microsoft Silverlight ' Vulnerable Mode: Browse Internet ' Tested On Microsoft Windows XP...