CVE-2018-4878

Образец CVE-2018-4878 Источник образца: https://github.com/brianwrf/CVE-2017-4878-Samples Аналитический отчёт: http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Источник эксплойта в python-скрипте: https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py — это скрипт генерации...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 Этот скрипт создает swf-нагрузку для CVE-2018-15982, основанную на PoC из https://github.com/smgorelik/Windows-RCE-exploits. Уязвимость была обнаружена Chenming Xu и Ed Miles из Gigamon ATR. Уязвимость представляет собой ошибку типа use-after-free, позволяющую выполнить...

CVE-2018-15982_EXP

CVE-2018-15982EXP Utilisation msfvenom -p windows/exec cmd=notepad.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=notepad.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin Génère exp.swf et index.html. Démonstration https://twitter.com/Evi1cg/status/1071284773169950721...

jsunpack-n

jsunpack-n jsunpack-n émule le comportement d'un navigateur lors de la visite d'une URL. Son but est de détecter les exploits qui ciblent les vulnérabilités des navigateurs et de leurs plug-ins. Il accepte de nombreux types d'entrées : Fichiers PDF - samples/sample-pdf.file Captures de paquets -...

ParrotNG

ParrotNG ParrotNG — это инструмент, способный выявлять приложения Adobe Flex SWF, уязвимые к CVE-2011-2461. Для получения более подробной информации, пожалуйста, обратитесь к слайдам нашего доклада на Troopers 2015. Загрузите последнюю версию ЗДЕСЬ. Возможности Написан на Java, основан на swfdump...

CVE-2018-15982_EXP_IE

CVE-2018-15982EXP Utilisation msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin produit exp.swf et index.html. Démo https://twitter.com/Evi1cg/status/1071284773169950721...

CVE-2018-15982

CVE-2018-15982 Flash 2018-15982 UAF p0c.swf — файл эксплойта Описание на арабском: http://xredteam.com/?p=253 https://twitter.com/syfi2k https://www.youtube.com/watch?v=UBc9R4QqJyc&feature=youtu.be...

rosettaflash

Rosetta Flash CVE-2014-4671 Adobe Flash Player до версии 13.0.0.231 и 14.x до 14.0.0.145 на Windows и OS X, а также до версии 11.2.202.394 на Linux, Adobe AIR до 14.0.0.137 на Android, Adobe AIR SDK до 14.0.0.137 и Adobe AIR SDK & Compiler до 14.0.0.137 не накладывают должных ограничений на форма...

flashmingo

FLASHMINGO Installation NOTE : Les instructions suivantes concernent Python3. Si vous avez besoin d'installer FLASHMINGO sur Python2.7, vous pouvez consulter la version 1.0 sous l'onglet releases. Les étapes d'installation sont essentiellement les mêmes. Installez les paquets Python3 listés dans...

CVE-2018-4878

Module Metasploit pour CVE-2018-4878 Le fichier SWF est basé sur le PoC de Michael Gorelik. Copiez CVE-2018-4878.swf dans data/exploits...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch Автор: Edmonds Commerce Эта CVE связана с CSRF-уязвимостью в файлах Adobe Flex .swf, используемых Magento. Дополнительную информацию об этой CVE можно найти здесь: Peter O'Callaghan - CSRF-уязвимость Magento через Adobe Flex Minded Security - Старое снова ново...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Исправленная версия uploader.swf и uploaderSingle.swf для устранения CVE-2011-2461 Дополнительная информация об уязвимых .swf-файлах в ядре Magento доступна здесь — https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html...

CVE-2026-57226

A flaw was found in Suricata, a network Intrusion Detection System IDS. When the non-default SWF Small Web Format decompression feature is enabled with an unsafe decompression depth, a remote attacker can send a specially crafted SWF response. This can trigger a heap buffer overflow during HTTP S...

DEBIAN-CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

UBUNTU-CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

CVE-2026-57226 Suricata swf: heap buffer overflow in SWF decompression depth handling

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

EUVD-2026-83381

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

CVE-2026-57226

Suricata (versions prior to 7.0.17 and 8.0.6 ) is vulnerable to an integer-related heap buffer overflow during HTTP SWF decompression. The flaw exists in src/util-file-decompression.c, where the software may use a configured decompress-depth for memory allocation instead of limiting the allocatio...