CVE-2013-2916

Removed by vendor...

CVE-2013-2915

Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL...

CVE-2013-2908

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code...

CVE-2013-2916: Undefined Security Weakness

Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code, in conjunction with a delay in notifying the user of an attempted spoof...

CVE-2013-2915: Undefined Security Weakness

Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL...

CVE-2013-2908: Undefined Security Weakness

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code...

FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)

Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...

PT-2013-4033

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue allows remote attackers to spoof the address bar via a URL with a malformed scheme. This can be demonstrated by a nonexistent URL, such as nonexistent:12121. Recommendations Fo...

PT-2013-4034

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue allows remote attackers to spoof the address bar via vectors involving a response with a 204 status code, in conjunction with a delay in notifying the user of an attempted spoo...

PT-2013-4026

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 30.0.1599.66 Description The issue allows remote attackers to spoof the address bar via vectors involving a response with a 204 status code, due to incorrect function calls to determine the values of...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 50 security fixes in this release, including: 223962270758271161284785284786 Medium CVE-2013-2906: Races in Web Audio. Credit to Atte Kettunen of OUSPG. 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. 265221 Medi...

Google Chrome < 30.0.1599.66 Multiple Vulnerabilities

Binary data 8015.pasl...

Google Chrome < 30.0.1599.66 Multiple Vulnerabilities

Binary data 801606.prm...

Beware of Fraudulent Sites, phishing for Twitter accounts

There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...

CVE-2013-1699

The Internationalized Domain Name IDN display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters...

PT-2013-3332

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 22.0 Description The issue concerns the Internationalized Domain Name IDN display algorithm, which does not properly handle certain top-level domains, including .com, .name, and .net. This allows remote...

CVE-2013-1699: Undefined Security Weakness

The Internationalized Domain Name IDN display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters...

CVE-2013-2317

The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window...

Code injection

The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window...

Security feature bypass

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...