II. XSF via appLoader In Part 1, I introduced an information leakage vulnerability in Youtube. In this part I will disclose a more severe vulnerability that allows arbitrary Flash code execution in youtube.com. This type of vulnerability is very similar to XSS except we execute Flash code instead of Javascript. It is called Cross-Site Flashing… Read More
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | Advanced Flash vulnerabilities in Youtube – Part 4 | 0 | 11.52 | 13-09-2017 |
| 2 | Advanced Flash Vulnerabilities in Youtube – Part 3 | 0 | 15.38 | 30-08-2017 |
| 3 | Advanced Flash Vulnerabilities in Youtube – Part 1 | 0 | 14.51 | 25-08-2017 |
| 4 | [CVE-2016-9263] XSF vulnerability in WordPress [UPDATED] | 0 | 9.98 | 12-10-2017 |
| 5 | FlashME! – WordPress vulnerability disclosure [CVE-2016-9263] | 0 | 9.77 | 19-10-2017 |
| 6 | Stored XSS on Facebook | 0 | 8.27 | 18-03-2018 |
| 7 | Into the Borg – SSRF inside Google production network | 0 | 11.2 | 20-07-2018 |
| 8 | DOM XSS in Gmail with a little help from Chrome | 0 | 7.35 | 03-05-2020 |
| 9 | How legitimate cloud platforms enable phishers to bypass MFA | 0 | 10.36 | 04-08-2026 |
| 10 | KDE Plasma Affected By Arbitrary Code Execution To Break Sandboxes With "Open New Window" | -2 | 7 | 02-07-2026 |