October 9, 2018—KB4462923 (Monthly Rollup)

None None...

Cross site scripting

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

CVE-2018-16453

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

CVE-2018-16453

PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...

PT-2018-13578 · Php Scripts Mall · Php Scripts Mall Domain Lookup Script

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Domain Lookup Script version 3.0.5 Description: The issue allows for cross-site scripting XSS in the search bar. Recommendations: For PHP Scripts Mall Domain Lookup Script version 3.0.5, update the script to a version that...

Microsoft Office: Information Bar

This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeinformationbar.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Information Bar Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Security Bulletin: Vulnerability in RC4 stream cipher affects Rational Functional Tester's Extension for Terminal-based Applications (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" attack may affect "Extension for Terminal-based Applications" a.k.a FTE that are shipped with Rational Functional Tester. Vulnerability Details CVEID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote...

Google Chrome Address Bar Spoofing Vulnerability (CNVD-2018-20745)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 64.0.3282.119. A remote attacker can exploit this vulnerability to spoof the content of Omnibox URL bar with the help...

September 26, 2018—KB4458469 (OS Build 17134.320)

None None...

CVE-2018-6119

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

UBUNTU-CVE-2018-6050

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6119

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Design/Logic Flaw

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6041

Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6050

CVE-2018-6050: In Google Chrome, the Omnibox (URL bar) UI could be spoofed via a crafted HTML page, allowing a remote attacker to misrepresent the target URL. This affects Chrome versions prior to 64.0.3282.119. Root cause is a security UI weakness in Omnibox handling that permits spoofed content...

Apple iOS Status Bar Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and the Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in versions of Apple iOS prior to 12. An attacker in close physical proximity could use the vulnerability to...

Apple iOS SafariViewController Address Bar Spoofing Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and SafariViewController is one of the web browser components. A security vulnerability exists in the SafariViewController component in versions of Apple iOS prior to 12. The vulnerability can be exploited by an attacker to...

Pakistani hacker reports address bar spoofing flaws in Edge & Safari browser

By Waqas Rafay Baloch has reported Vulnerability in Edge and Safari Browsers that Allows Address Bar Exploitation. Nowadays the phishing attacks have become increasingly sophisticated and difficult to detect so it is indeed appreciable that security researchers are managing to spot such campaigns...

Apple Yet to Patch Safari Browser Address Bar Spoofing Flaw

A browser address bar spoofing flaw was found by researchers this week in Safari – and Apple has yet issue a patch for the flaw. Researcher Rafay Baloch on Monday disclosed two proof-of-concepts revealing how vulnerabilities in Edge browser 42.17134.1.0 and Safari iOS 11.3.1 could be abused to...

Mozilla Firefox for Android Spoofing Vulnerability

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 62 for Android. The vulnerability can be exploited by remote attackers to spoof the contents of the...