2386 matches found
Adobe Flash Player Type Confusion (APSB17-23: CVE-2017-3106)
A type confusion overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
PT-2017-15656 · Adobe +2 · Flash Player +2
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 26.0.0.137 and earlier Description: The issue is related to a type confusion vulnerability when parsing SWF files, which could lead to arbitrary code execution if successfully exploited. This allows an attacker to...
Adobe Flash Player Security Bypass (APSB17-23: CVE-2017-3085)
A security bypass vulnerability exists in Adobe Flash Player. The vulnerability is due to insufficient redirection checks when performing URL redirect. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...
KLA11085 Multiple vulnerabilities in Adobe Flash Player
Multiple serious vulnerabilities have been found in Adobe Flash Player versions earlier than 26.0.0.151. Malicious users can exploit these vulnerabilities to obtain sensitive information and execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security bypass vulnerability...
Socusoft: XSS in HTML Content Generated by Flash Slideshow Maker (All Versions)
The vulnerability identified does not exist within the software application itself, instead, the vulnerability presents itself within the application's exported files which end up hosted on an external web-server. Socusoft's Flash Slideshow Maker application has two configuration themes associate...
Flash Slideshow Maker Professional XSS / Content Forgery / Redirect
================================================================================= | | | | | | | | | | | |/' | / / / / | ' | /| | ' \ \ / | '| \ \ \ /\ / / | | | \ |/ / | | | | |./ / | | ./ /\ V V / || ||/|| || ||/ || / // C O N T A C T : Twitter: @ret2eax Email: [email protected] Blog:...
Unikrn: Persistent XSS found on bin.pinion.gg due to outdated FlowPlayer SWF file with Remote File Inclusion vulnerability.
Description Hi. Today i looked to some outscope subdomains .pinion.gg for recon purposes. I discovered an interesting file on http://templ4d2.pinion.gg/motd2.manifest with next content: CACHE MANIFEST 2014-07-07 CACHE: http://bin.pinion.gg/bin/companions.min.js...
bcbstx.com XSS vulnerability
Vulnerable URL: https://www.bcbstx.com/howsyourheart/flash/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check...
www1.nyc.gov XSS vulnerability
Vulnerable URL: https://www1.nyc.gov/assets/doh/media/nyc-teen/video/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No...
jacobsschool.ucsd.edu XSS vulnerability
Vulnerable URL: http://jacobsschool.ucsd.edu/assets/scripts/mediaplayer-3-16/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364%20766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|---...
SWFTools Denial of Service Vulnerability (CNVD-2017-15106)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfDeleteFilter' function in the lib/modules/swffilter.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointe...
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
[SECURITY] Fedora 24 Update: php-horde-Horde-Image-2.5.1-1.fc24
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
DNN (DotNetNuke) 3.0.0 < 9.1.0 SWF File Handling XSS
The version of DNN Platform formerly DotNetNuke running on the remote host is 3.0.0 or later but prior to 9.1.0. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input when handling SWF files. An unauthenticated, remote attacker ca...
[SECURITY] Fedora 26 Update: php-horde-Horde-Image-2.5.1-1.fc26
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
SWFTools Denial of Service Vulnerability (CNVD-2017-15105)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfRelocate' function in the lib/modules/swftools.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer...
Adobe Flash Player Information Disclosure (APSB17-21: CVE-2017-3099)
An information disclosure vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Adobe Flash Player Memory Corruption (APSB17-21: CVE-2017-3100)
A remote memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an out-of-bounds memory read while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...
