Adobe Pixel Shader

Added: 06/24/2014 CVE: CVE-2014-0515 BID: 67092 OSVDB: 106347 Background The Adobe Flash plugin provides flash content rendering for web browsers. Problem A buffer overflow exists due to an error in processing SWF files. The vulnerable function exists in the the DisplayShader class and can be...

Adobe Pixel Shader

Added: 06/24/2014 CVE: CVE-2014-0515 BID: 67092 OSVDB: 106347 Background The Adobe Flash plugin provides flash content rendering for web browsers. Problem A buffer overflow exists due to an error in processing SWF files. The vulnerable function exists in the the DisplayShader class and can be...

Tipask全版本通杀持久型XSS漏洞

简要描述： Tipask问答系统是一款开放源码的PHP仿百度知道程序。以国人的使用习惯为设计理念，采用MVC构架，系统具有速度快，SEO友好，界面操作简洁明快等特点。天极网、戴尔中国、WPS office等大型网站均采用了该系统。 详细说明： Tipask问答系统在对用户提问的时候允许上传附件类型存在安全隐患： 文件 /control/attach.php 有如下代码： function onupload //上传配置 $config = array "uploadPath" = "data/attach/", //保存路径 "fileType" = array".rar", ".doc...

ThinkSNS 储存型xss一枚

简要描述： rt. 详细说明： 对于swf文件 过分信任 通杀所有浏览器 测试代码 : http://demo.thinksns.com/t3/weiba/post2075 chrome firefox ie 10 可蠕虫。 漏洞证明： chrome firefox https://images.seebug.org/upload/201406/150142590b17fc5d7dedb7e685f9e1f2797b7c98...

openSUSE Security Update : gnash (openSUSE-SU-2012:0415-1)

specially crafted swf files could cause an integer overflow in gnash %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-177. The text description of this plugin is C SUSE LLC...

RHEL 5 / 6 : flash-plugin (RHSA-2014:0745)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

程氏舞曲CMS储存型 xss（5）

简要描述： rt，swf啊。。 详细说明： 上传视频处 。对于外部swf文件 过分信任 可插入 如下代码 构造 恶意的 swf 执行 js 像这样 alert 这是 获取cookie的swf代码 package import flash.external.ExternalInterface; import flash.display.Sprite; import flash.display.Sprite; import flash.events.Event; import flash.net.URLLoader; import flash.net.URLRequest; import...

Destoon B2B 2014-05-21最新版csrf getshell

简要描述： 上传问题+csrf+后台任意命令执行 = csrf getshell 详细说明： 先说上传问题，自带的fck编辑器没有验证上传图片的合法性，只判断了后缀名。 可以通过上传一个.jpg后缀的swf来进行csrf 然后是后台命令执行 /member/admin/sendmail.inc.php 行151 default: ifisset$send ifisset$preview && $preview $content = stripslashes$content; if$template if$sendtype == 2 $emails = explode"\n",...

PHP云人才某系统功能CSRF漏洞

简要描述： @/fd牛在drops丢了一篇关于上传问题的文章，http://drops.wooyun.org/tips/2031 关于这篇文章的一些细节在@/fd牛发表之前刚好跟@Mramydnei M哥聊过一些 M哥表示wb已经足够ipad了所以就把这个机会让给了我，我就献丑找个通用型的cms来一发 ps:这个问题的根源出在上传逻辑上，所以类型选了文件上传 ps:感谢@Mramydnei 详细说明： 这个问题对没有检查上传文件头，没有写好crossdomain.xml的站点来说危害很大 待会儿再发一个没处理好crossdomain.xml导致问题的样例...

Coremail邮件系统存储型XSS之二

简要描述： 设计错误导致可执行恶意JavaScript代码并窃取用户cookies 详细说明： 将特制的swf文件作为附件发送给受害者（这里可以选择在过节的时候下手，比如将文件名改称新年贺卡.swf）： swf文件的AS代码如下（将就着看吧，东拼西凑整出来的）： package import flash.external.ExternalInterface; import flash.display.Sprite; import flash.display.Sprite; import flash.events.Event; import flash.net.URLLoader;...

Adobe Flash Player Memory Corruption (APSB14-14: CVE-2014-0510)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

Adobe Flash Player - Integer Underflow Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Integer Underflow Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in the...

GLSA-201405-04 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-04 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Adobe Flash Player Buffer Overflow Arbitrary Code Execution (CVE-2014-0515)

An arbitrary code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a buffer overflow while handling specially crafted SWF files. A remote attacker can exploit this vulnerability to execute arbitrary files on the victim's computer...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

Adobe Flash Player Type Confusion Remote Code Execution Exploit

This Metasploit module exploits a type confusion vulnerability found in the ActiveX component of Adobe Flash Player. This vulnerability was found exploited in the wild in November 2013. This Metasploit module has been tested successfully on IE 6 to IE 10 with Flash 11.7, 11.8 and 11.9 prior to...