CVE-2013-6656

The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote attackers to obtain sensitive...

CVE-2013-6656

CVE-2013-6656 affects Chrome/Blink: the XSSAuditor in core/html/parser/XSSAuditor.cpp processes POST requests by using the body of a redirecting page instead of the redirect target, enabling an information leak. The CVE is documented as a medium-severity issue (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N...

Google Chrome < 33.0.1750.117 Multiple Vulnerabilities

Binary data 8130.pasl...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 28 security fixes in this release, including: 334897 High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid. 331790 High CVE-2013-6653: Use-after-free related to web contents. Credit to Khalil Zhani. 333176 High...

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.117 for Windows, Mac, and Linux. Security Fixes and Rewards This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page fo...

CVE-2012-6656

iconvdata/ibm930.c in GNU C Library aka glibc before 2.16 allows context-dependent attackers to cause a denial of service out-of-bounds read via a multibyte character value of "0xffff" to the iconv function when converting IBM930 encoded data to UTF-8...

CVE-2008-6656

Open Auto Classifieds 1.4.3b is affected by multiple SQL injection vulnerabilities described in CVE-2008-6656. The vulnerabilities reside in the application's listings.php (id parameter) and login.php (username field). The underlying issue is improper input handling that allows an attacker to man...

CVE-2007-6656

The CVE-2007-6656 entry describes an SQL injection in CMS Made Simple's TinyMCE module, specifically in content_css.php, affecting CMS Made Simple 1.2.2 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The provided sources conf...