6506 matches found
Brave Software: Sending arbitrary IPC messages via overriding Array.prototype.push
Summary: This bug is similar to 187542 and 188086. I found that also Array.prototype.push is exploitable. Tested on: Brave 0.12.12 Steps To Reproduce: 1. Go to this page: https://vulnerabledoma.in/brave/settingschange3.html Array.prototype.push=functione this0=functione,f...
UBUNTU-CVE-2016-5226
Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...
Brave Software: Sending arbitrary IPC messages via overriding Function.prototype.apply
Summary: Brave Browser allows to overwrite the internal js code from the user js code. Using this behavior, an attacker can send arbitrary IPC messages and do UXSS, address bar spoofing, changing browser settings and so on. This bug is similar to 187542. Tested on: Brave 0.12.11 Steps To Reproduc...
Google Fixes 12 High-Severity Vulnerabilities In Chrome Browser
Google is urging Windows, Mac and Linux users to update their Chrome browsers to fix multiple vulnerabilities that could allow malicious third parties to take control of targeted systems. Released Thursday, Chrome version 55.0.2883.75 for Windows, Mac, and Linux fixes those security issues. It al...
Brave Software: Brave Browser unexpectedly allows to send arbitrary IPC messages
Summary: I found that Brave Browser allows to overwrite the internal js code from the user js code. Using this behavior, an attacker can send arbitrary IPC messages and do UXSS, address bar spoofing, changing browser settings and so on. Steps to Reproduce: 1 . An attacker overwrites...
joomla create a privileged user exploit analysis(cve-2016-8869)-vulnerability warning-the black bar safety net
Vulnerability environment Joomla version 3. 44 to 3. 63 Vulnerability description This vulnerability and CVE-2016-8869 is a companion piece to the vulnerability, but this vulnerability than 8869 this vulnerability, the ideas more ingenious, more interesting. This vulnerability nature is also...
Via WordPress Auto Update feature disposable invasion Internet 2 7%site-vulnerability warning-the black bar safety net
Recently, we are still constantly trying to find the WordPress community in a third-party plug-ins and themes in the presence of security vulnerabilities. During the study, we are also on WordPress core, and the associated wordpress. org system were detected. In the beginning of the year, we...
WordPress auto-update mechanism of the serious vulnerability: the global ultra-1/4 site can be hacker in one fell swoop rout-vulnerability warning-the black bar safety net
Wordfence recently disclosed an impact of a large range of security issues, a large number of WordPress sites are affected. This exploit is WordPress Auto-Update feature, this feature is enabled by default, but also because the entire on the Internet there are about 2 7% of the sites are using...
OwnCloud 'file' app content spoofing vulnerability
OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany. A content spoofing vulnerability exists in the OwnCloud 'file' app due to the location bar in the file app failing to validate passed parameters, allowing an attacker to spoof a link to a fake directory...
CVE-2016-9076
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...
Mozilla Firefox Address Bar Spoofing Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from an address bar spoofing vulnerability that could lead to spoofing attacks. An attacker could exploit this vulnerability to spoof addresses and perform unauthorized...
UBUNTU-CVE-2016-9076
An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...
Mozilla Firefox Address Bar Spoofing Vulnerability (CNVD-2016-11485)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from an address bar spoofing vulnerability that can be exploited by attackers to spoof addresses, leading to potential spoofing attacks...
Mozilla Firefox Security Advisories (MFSA2016-89, MFSA2016-90) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Security vulnerabilities fixed in Firefox 50 — Mozilla
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. When the Mozilla Updater is run, if the Updater's log file in the...
Content-Spoofing in "files" app - ownCloud
The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user. Affected Software ownCloud Server 9.1.2 CVE-2016-????...
Atlassian JIRA 6.4.x < 6.4.10 CSRF / XSRF (Bar Mitzvah)
Binary data 9736.prm...
MySQL / MariaDB / PerconaDB - mention the rights/conditions of competition vulnerability(POC)-vulnerability warning-the black bar safety net
Vulnerability found person: Dawid Golunski Vulnerability level: severe CVE number: CVE-2 0 1 6-6 6 6 3 / CVE-2 0 1 6-5 6 1 6 Vulnerability impact: MariaDB 5.5.52 10.1.18 10.0.28 MySQL = 5.5.51 = 5.6.32 = 5.7.14 Percona Server 5.5.51-38.2 5.6.32-7 8-1 5.7.14-8 Percona XtraDB Cluster 5.6.32-25.17...