Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
1 vote
1 answer
215 views

Flash Vulnerabilities

What type of risks do I expose myself to by enabling flash in the browser? Web developers or online game developers who can use those vulnerabilities to crash my computer or exploit it by downloading ...
ben 's user avatar
  • 11
0 votes
1 answer
179 views

Will browser isolation solution protect our enterprise from Flash and JavaScript exploits and fileless malware?

Since we didn't see any pentest done to bypass on such solution, we don't really know if it worth purchasing such type of solution. Will this really protect us from Flash and JavaScript exploits, ...
Filipon's user avatar
  • 1,294
0 votes
2 answers
141 views

chrome invisible flash document

I have it so flash doesn't start on page load for security and performance. Lately I have been noticing That some pages will load with a flash document that takes up the full screen. I can see it as ...
Patrick W. McMahon's user avatar
2 votes
1 answer
234 views

Click to play plugins vs. AdBlock?

Reading through articles like Faked Flash-based ads... I'm wondering what is a better way to keep yourself safe from malvertising. Many people suggest setting your browser's plugin settings to "Click ...
E.V.I.L.'s user avatar
  • 125
9 votes
2 answers
277 views

Secure Flash with click to play plugins in the enterprise

In the light of recent repeated critical Flash vulnerabilities there are recommendations to use browser plugins like click-to-play to prevent unnecessary Flash content from automatically loading with ...
user avatar
0 votes
1 answer
232 views

Secure keyboard entry with JavaScript or Flash?

Is it possible to perform secure keyboard entry (similar to what is offered in the OS X Terminal app) using only web technologies and/or Flash? If not, is there any way to more broadly guarantee ...
AJAr's user avatar
  • 2,412
6 votes
3 answers
338 views

find if 0-day flash bug was exploited (on a particular machine)

There have been several critical 0-day exploits in the past days/weeks in Flash alone. Nobody knows how long the 0-days have been exploited, and it is reasonable to expect that there are 0-days being ...
Martin Vegter's user avatar
4 votes
3 answers
7k views

How is it possible that a virus can infect the system if the browser is started with non-admin rights

If I open my web browser (for example firefox) in Windows 7 with activated UAC as normal user (non admin) a virus - which uses a security leak in my browser - will only gets privileges of the normal ...
Jan Koester's user avatar
2 votes
2 answers
824 views

Is a browser with disabled scripts and disabled java enough against malware

Is a browser like Firefox with disabled scripts (for example via a plugin like no-script) and disabled Java enough to be protected against drive-by-malware from the internet. Of course this does not ...
Jan Koester's user avatar
3 votes
2 answers
2k views

Where do I get started in terms of learning how to exploit Java and Flash vulnerabilities? or browser exploitation in general

Another Java 0day was discovered today which got me thinking how browser exploitation (remote execution on clients browser) works. I am unable to find any books or resources online about browser ...
Kush's user avatar
  • 275
3 votes
3 answers
1k views

Are flash cookies still a threat and that persistent?

One year (or more) ago flash cookies were really a problem, because they could not be deleted from within a browser. They were not managed by the browser but by the flash player. Flash cookies were ...
Gero's user avatar
  • 215
4 votes
4 answers
695 views

Is silverlight and Java running on the web browser capable of saving "state" into the user's local machines?

I am aware that even after we have cleared our cache and cookies, websites can still save files/information into our computer using Flash (Flash ever cookies), I was wondering does other plugins like ...
Pacerier's user avatar
  • 3,343
5 votes
4 answers
832 views

Is flash or javascript a bigger security concern? [closed]

Many flash website whitelisting extensions for chrome (such as flashblock and flashcontrol) use javascript in order to selectively block Adobe Flash from functioning. Thus, In order to get this ...
Dan's user avatar
  • 67