14 matches found
SUSE CVE-2026-17692
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-17692
creationtimestamp| type| source ---|---|--- 2026-07-30 04:47:24+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-07-30 16:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvimrign2e 2026-08-03 09:53:06+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2026-17692
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to...
Samsung Internet Browser SOP Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the...
Foxit PhantomPDF < 8.3.8, 9.x < 9.3 Multiple Vulnerabilities (Jun 2019) - Windows
Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...
CVE-2018-17692
CVE-2018-17692 affects Foxit PhantomPDF (and Foxit Reader) for Windows, specifically the HTML-to-PDF conversion path. The root cause is an out-of-bounds write stemming from inadequate validation of user-supplied data during HTML-to-PDF conversion, allowing remote code execution. Affected versions...
Foxit PhantomPDF Multiple Vulnerabilities (Nov 2018) - Windows
Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...
Samsung Internet Browser SOP Bypass (CVE-2017-17692)
A SOP bypass vulnerability exists within the Samsung internet browser. This vulnerability is due to the way the browser handles its same origin policy. A successful attack could lead to stolen information...
Critical "Same Origin Policy" Bypass Flaw Found in Samsung Android Browser
A critical vulnerability has been discovered in the browser app comes pre-installed on hundreds of millions of Samsung Android devices that could allow an attacker to steal data from browser tabs if the user visits an attacker-controlled site. Identified as CVE-2017-17692, the vulnerability is Sa...
CVE-2017-17692
CVE-2017-17692 affects Samsung Internet Browser 5.4.02.3. A vulnerability allows remote attackers to bypass the Same Origin Policy by serving crafted JavaScript that redirects to a child tab and rewrites the innerHTML, enabling information disclosure. Public materials in connected docs describe p...
Samsung Internet Browser SOP Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the...
Samsung Internet Browser SOP Bypass
This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the Samsung Internet Browser, a popular mobile browser shipping with Samsung Android devices. By default, it initiates a redirect to a child tab, and rewrites the innerHTML to gather credentials via a fake pop-up...
f6s.com XSS vulnerability
Vulnerable URL: https://www.f6s.com/main/authorization/login?popup=truemessage=messageactsasfollowpresentation='" Details: Description| Value ---|--- Patched:| Yes, at 04.07.2017 Latest check for patch:| 04.07.2017 22:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
Unfixed XSS vulnerability at www.freefoto.com
Security researcher F3nix, has submitted on 07/01/2008 a cross-site-scripting XSS vulnerability affecting www.freefoto.com, which at the time of submission ranked 17692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...