chromium-browser: limited xss in blink

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

Brave Software: Sending arbitrary IPC messages via overriding Array.prototype.push

Summary: This bug is similar to 187542 and 188086. I found that also Array.prototype.push is exploitable. Tested on: Brave 0.12.12 Steps To Reproduce: 1. Go to this page: https://vulnerabledoma.in/brave/settingschange3.html Array.prototype.push=functione this0=functione,f...

UBUNTU-CVE-2016-5226

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

Brave Software: Sending arbitrary IPC messages via overriding Function.prototype.apply

Summary: Brave Browser allows to overwrite the internal js code from the user js code. Using this behavior, an attacker can send arbitrary IPC messages and do UXSS, address bar spoofing, changing browser settings and so on. This bug is similar to 187542. Tested on: Brave 0.12.11 Steps To Reproduc...

Google Fixes 12 High-Severity Vulnerabilities In Chrome Browser

Google is urging Windows, Mac and Linux users to update their Chrome browsers to fix multiple vulnerabilities that could allow malicious third parties to take control of targeted systems. Released Thursday, Chrome version 55.0.2883.75 for Windows, Mac, and Linux fixes those security issues. It al...

Brave Software: Brave Browser unexpectedly allows to send arbitrary IPC messages

Summary: I found that Brave Browser allows to overwrite the internal js code from the user js code. Using this behavior, an attacker can send arbitrary IPC messages and do UXSS, address bar spoofing, changing browser settings and so on. Steps to Reproduce: 1 . An attacker overwrites...

Mozilla Firefox Address Bar Spoofing Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from an address bar spoofing vulnerability that could lead to spoofing attacks. An attacker could exploit this vulnerability to spoof addresses and perform unauthorized...

Mozilla Firefox Address Bar Spoofing Vulnerability (CNVD-2016-11485)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from an address bar spoofing vulnerability that can be exploited by attackers to spoof addresses, leading to potential spoofing attacks...

Brave Software: [ios] Address bar spoofing in Brave for iOS

Hey Summary: I've found an address bar spoofing vulnerability in the latest version of Brave for iOS. Products affected: Brave for iOS 1.2.16 Android maybe? PoC: html var spoof = function document.write"This is not Google"; document.location = "https://google.com:1234";...

UBUNTU-CVE-2016-5187

Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

Brave Software: [iOS/Android] Address Bar Spoofing Vulnerability

Hello, I am Aaditya Purani, I would like to Report Address Bar spoofing vulnerability in Brave Browser on the IOS as well as Android Platform. All the Test have been carried out against Latest Brave Browser whose versions i have mentioned in Products affected section. Summary: Brave Browser Suffe...

Brave Software: Address Bar Spoofing - Already resolved - Retroactive report

Summary: All details were provided in the original report. You can read it here I'm reporting it here because I asked bcrypt if I should do it and he told me this: F127893 As she said me, I'm reporting here and indicating it's for a retroactive reward. If any identity confirmation or link between...

Chrome Address Bar URL Spoofing on IOS

来源链接： http://xlab.tencent.com/cn/2016/10/11/CVE-2016-1707-Chrome-Address-Bar-URL-Spoofing-on-IOS/ （英文版）http://xisigr.com/x/cve-2016-1707/ 0x00 Vulnerability Overview Chrome浏览器地址栏欺骗漏洞CVE-2016-1707，这个漏洞笔者于2016年6月报告给Google，现在把漏洞细节分享给大家。URL Spoofing漏洞可以伪造一个合法的网站地址。攻击者可以利用这个漏洞对用户发起网络钓鱼攻击。 受影响版本：Chrome...

Mac OS X : Apple Safari < 10.0 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X or macOS host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in WebKit that allow an unauthenticated, remote attacker to cause a denial of service condition or execut...

CVE-2016-4751

The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a crafted web site...

Code injection

The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a crafted web site...

About the security content of Safari 10

About the security content of Safari 10 This document describes the security content of Safari 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

openSUSE Security Update : Chromium (openSUSE-2016-1080)

Chromium was updated to 53.0.2785.101 to fix a number of security issues and bugs. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free...

FreeBSD : chromium -- multiple vulnerabilities (958b9cee-79da-11e6-bf75-3065ec8fd3ec)

Google Chrome Releases reports : 10 security fixes in this release, including : - 629542 High CVE-2016-5141 Address bar spoofing. Credit to anonymous - 626948 High CVE-2016-5142 Use-after-free in Blink. Credit to anonymous - 625541 High CVE-2016-5139 Heap overflow in pdfium. Credit to GiWan Go of...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:2296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...