>> CATEGORY: exploit

Adobe Flash suffers from an out-of-bounds memset in BlurFilter processing.

There is a use-after-free in Adobe Flash that appears to be related to rendering the display based on multiple scripts.

Proof of concept code that demonstrates a use-after-free when setting stage in Adobe Flash.

WordPress AzonPop plugin version 1.0.0 suffers from a remote SQL injection vulnerability.

The o2 Auto Configuration Server (ACS) discloses VoIP/SIP credentials of arbitrary customers when receiving manipulated CWMP packets. These credentials can then be used by an attacker to register any VoIP…

Symantec Endpoint Protection version 12.1.4013 suffers from a denial of service vulnerability.

WordPress Symposium Pro Social plugin version 15.12 suffers from cross site request forgery and cross site scripting vulnerabilities.

TrueCrypt versions 7.1a and 7.2 suffer from a DLL hijacking vulnerability with their installers.

AVM FRITZ!OS versions prior to 6.30 suffer from an html injection vulnerability.

The vulnerability Laboratory Research Team has discovered multiple web validation vulnerabilities in the barracuda Message Archiver v650 Product.