Address bar spoofing on macOS Safari(CVE-2017-2500)

version: Safari function spoof document.write"Apple loginPlease input your Apple ID!!!But this is not apple.com!"; window.location.assign"http://www.apple.com:1234"; //or you can use the following JS code: //window.location.assign"http://access.apple.com"; setIntervalspoof,2000; setTimeoutfunctio...

USN-3260-2: Firefox regression

USN-3260-1 fixed vulnerabilities in Firefox. The update caused the date picker panel and form validation errors to close immediately on opening. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a...

Unspecified Vulnerability in Mozilla Firefox for Android (CNVD-2017-07066)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 53 for Android. An attacker can exploit the vulnerability to forge the contents of the address bar...

Unspecified Vulnerability in Mozilla Firefox for Android

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 53 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Address bar forgery vulnerability in multiple Mozilla products

Mozilla Firefox, Firefox ESR and Thunderbird are all developed by the Mozilla Foundation.Firefox is an open source web browser, Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client from Mozilla...

Unspecified Vulnerability in Mozilla Firefox for Android (CNVD-2017-07065)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 53 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects...

Google Chrome Omnibox URL Forgery Vulnerability

Google Chrome is a web browser developed by Google Inc. in the United States. A URL forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit this vulnerability by submitting a special WEB page and tricking the user into parsing it, which can be used to spoof...

Google Chrome Omnibox URL Forgery Vulnerability (CNVD-2017-07272)

Google Chrome is a web browser developed by Google Inc. in the United States. A URL forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit this vulnerability by submitting a special WEB page and tricking the user into parsing it, which can be used to spoof...

Opera Web Browser Address Bar Spoofing Vulnerability

Opera Mini and Opera Stable are both web browsers developed by the Norwegian company Opera Software. An address bar spoofing vulnerability exists in Opera Mini version 13 and Opera Stable version 36. A remote attacker can exploit this vulnerability to spoof the displayed URL with a specially...

Apple iOS webkit address bar forgery vulnerability

Apple iOS is an operating system for Apple smart devices. A spoofing vulnerability exists in the address bar of the Webkit user interface used by Apple iOS, which allows an attacker to construct malicious links and trick users into clicking on them, which can spoof the address bar...

Apple iOS Safari Address Bar Forgery Vulnerability

Apple iOS is an operating system for Apple smart devices. An address bar forgery vulnerability exists in Apple iOS Safari, which allows attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and can be spoofed for content...

Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects...

CVE-2017-5451

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects...

CVE-2017-5458

When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. This vulnerability affects Firefox 53...

UBUNTU-CVE-2017-5458

When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. This vulnerability affects Firefox 53...

UBUNTU-CVE-2017-5451

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects...

Mozilla Firefox - Address Bar Spoofing

Mozilla Firefox - Address Bar Spoofing location=URL.createObjectURLnew Blob'Not Googleiflocation.href.indexOf"google"==-1location.pathname="https://www.google.com/"elsedocument.title="Google Search"', type: 'text/html'...

Mozilla Firefox - Address Bar Spoofing

location=URL.createObjectURLnew Blob'Not Googleiflocation.href.indexOf"google"==-1location.pathname="https://www.google.com/"elsedocument.title="Google Search"', type: 'text/html'...

CVE-2017-2376

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page...