Debian DLA-1240-1 : ming security update

Multiple vulnerabilities have been discovered in Ming : CVE-2017-11732 heap-based buffer overflow vulnerability in the function dcputs util/decompile.c in Ming = 0.4.8, which allows attackers to cause a denial of service via a crafted SWF file. CVE-2017-16883 NULL pointer dereference vulnerabilit...

Important: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Integer overflow

In libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the readUInt32 function util/read.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

CVE-2018-5294

In libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the readUInt32 function util/read.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

CVE-2018-5294

In libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the readUInt32 function util/read.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

CVE-2018-5251

In libming 0.4.8, there is an integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-5251

In libming 0.4.8, there is an integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-5251

In libming 0.4.8, there is an integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file...

UBUNTU-CVE-2018-5251

In libming 0.4.8, there is an integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file...

Integer overflow

In libming 0.4.8, there is an integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-5251

In libming 0.4.8, there is an integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file...

CVE-2018-5251

CVE-2018-5251 affects Ming/libming, specifically libming 0.4.8. The issue is an integer signedness error in readSBits (util/read.c) that can be triggered by a crafted SWF file to cause a denial of service. Multiple connected advisories confirm the same vulnerability and its presence across distri...

Kindred Group: Full Account Takeover on *.unibet.com due to crossdomain.xml and AkamaiPlayer loaderContext

==Below is the original, partially-redacted report== --------- Hi, The core issue here are two things: 1. The too wide crossdomain.xml located at: https://payment.unibet.com/crossdomain.xml https://se.unibet.com/crossdomain.xml https://www.unibet.com/crossdomain.xml 2. Issues with not-in-scope...

Node.js third-party modules: [redis-commander] Reflected SWF XSS via vulnerable "clipboard.swf" component

Hi, An injection in the highlighterId parameter of the clipboard.swf component can be used to reflect JavaScript in the context of hosts running Redis Commander. Module specification Name: redis-commander Version: 0.4.5 latest release build Verified conditions Test server: Ubuntu 16.04 LTS Browse...

Denial of Service Vulnerability in SWFTools Software gif2swf Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the gif2swf module of the SWFTools software. An attacker working with malformed gif files can cause the program to crash and, if successfully exploited, can lead to arbitrar...

chelshamleather.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429618 Description| Value ---|--- Affected Website:| chelshamleather.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

beedesigns.f9.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429613 Description| Value ---|--- Affected Website:| beedesigns.f9.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

learntocue.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429597 Description| Value ---|--- Affected Website:| learntocue.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

zound.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429598 Description| Value ---|--- Affected Website:| zound.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

kuchynteplice.cz XSS vulnerability

Open Bug Bounty ID: OBB-429578 Description| Value ---|--- Affected Website:| kuchynteplice.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...