Curated security research, vulnerabilities, advisories and tools for practitioners.

#flash

Security coverage tagged flash.

1.

VRT v1.10 Released: Flash downgrades and extended automotive categorization

vulnerability | 2021-03-30 00:00 | bugcrowd.com | Original ↗ | .md | #bugcrowd | #vrt | #vulnerability-rating

2.

Flash Dumping - Part II

research | 2018-03-06 23:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #hardware | #flash

3.

Flash Dumping - Part I

research | 2017-09-04 22:00 | blog.quarkslab.com | Original ↗ | .md | #hardware | #embedded | #pcb

4.

Defeating CSRF Protections Through Expired cross-domain.xml Domains

blog | 2017-02-21 00:00 | netspi.com | Original ↗ | .md | #csrf | #flash | #web-pentesting

5.

Breaking the Chain

blog | 2016-11-29 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-management | #windows | #flash

6.

Life After the Isolated Heap

blog | 2016-03-28 00:00 | projectzero.google | Original ↗ | .md | #use-after-free | #exploitation | #flash

7.

Three bypasses and a fix for one of Flash's Vector.<*> mitigations

blog | 2015-08-19 00:00 | projectzero.google | Original ↗ | .md | #exploitation | #flash | #adobe

8.

Attacking ECMAScript Engines with Redefinition

blog | 2015-08-17 00:00 | projectzero.google | Original ↗ | .md | #exploitation | #javascript | #flash

9.

One Perfect Bug: Exploiting Type Confusion in Flash

blog | 2015-07-20 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #exploitation | #flash

10.

Significant Flash exploit mitigations are live in v18.0.0.209

blog | 2015-07-16 00:00 | projectzero.google | Original ↗ | .md | #defense | #flash | #exploit-mitigations

11.

From inter to intra: gaining reliability

blog | 2015-07-10 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #exploitation | #reliability

12.

A Tale of Two Exploits

blog | 2015-04-13 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #exploitation | #flash

13.

(^Exploiting)\s*(CVE-2015-0318)\s*(in)\s*(Flash$)

vulnerability | 2015-02-12 00:00 | CVE-2015-0318 | projectzero.google | Original ↗ | .md | #vulnerability-research | #exploitation | #flash

14.

Exploiting CVE-2014-0556 in Flash

advisory | 2014-09-23 00:00 | CVE-2014-0556 | projectzero.google | Original ↗ | .md | #exploitation | #flash | #adobe

15.

What does a pointer look like, anyway?

blog | 2014-08-21 00:00 | projectzero.google | Original ↗ | .md | #information-disclosure | #exploitation | #flash

16.

Tool release: AMF Deserialize Burp Plugin

blog | 2013-01-09 00:00 | netspi.com | Original ↗ | .md | #deserialization | #tool-release | #plugin

17.

All your header are belong to us

blog | 2007-07-13 07:52 | portswigger.net | Original ↗ | .md | #php | #web-security | #xss

18.

Black Hat Europe

blog | 2007-03-19 13:51 | portswigger.net | Original ↗ | .md | #black-hat | #conference | #reverse-engineering