CVE-2022-39873

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication...

TYPO3 Backend component Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark...

Liferay Portal XSS Vulnerability

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

GHSA-CM99-X97G-9QX8 Liferay Portal XSS Vulnerability

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

Bookmarked Sites Retriever

This module discovers information about a target by retrieving their bookmarked websites on Google Chrome, Opera and Microsoft Edge. Module Options msf use post/windows/gather/getbookmarks msf postgetbookmarks show actions ...actions... msf postgetbookmarks set ACTION msf postgetbookmarks show...

Improper Control of a Resource Through its Lifetime in the input field "Bookmark Tabs"

Description The Organizr application allows large characters to insert in the input field "Bookmark Tabs" which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. Proof of Concept 1.Login to the application 2.Go to "Tab Editor" - "Bookmark Tabs". 3.Click on the +...

Allocation of Resources Without Limits in "Bookmark Categories"

Description The Organizr application allows large characters to insert in the input field "Bookmark Categories" which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. Proof of Concept 1.Login to the application 2.Go to "Tab Editor" - "Categories" - "Bookmark...

Marcador security vulnerabilities

marcador is a simple rofi-based bookmark manager by the individual developer joajfreitas. A security vulnerability exists in marcador. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Organizr cross-site scripting vulnerabilities

Organizr is a tab management system designed to be a one-stop shop for server front ends. Organizr version 2.1.1810 previously existed a cross-site scripting vulnerability, the vulnerability stems from the bookmark tab and bookmark category fields lack of user-supplied data and output data...

CVE-2022-27839

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

CVE-2022-27839

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

CVE-2022-27839

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

Authentication flaw

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

CVE-2022-27839

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

PT-2022-18628

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 16.2.1 Description The issue is related to an improper authentication vulnerability in the SecretMode of Samsung Internet. This vulnerability allows attackers to access the bookmark tab without proper...

CVE-2022-27839: Improper Authentication

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

csrf bug to remove a bookmark

Description CSRF bug to remove bookmark Proof of Concept There is no csrf token check during bookmark remove .\ Let say there is two user 1. user-A -- victim \ 2. user-B -- attacker \ STEP ======== 1. user-A create bookmark and lets bookmark id is 123\ 2. Now user-B attacker send a link...

Multiple Idor

Description There are multiple idors i found. In bookmarks//edit, bookmarks//remove, bookmarks//archive, bookmarks//unarchive. It gets the object provided in the bookmarkid without checking if the owner of the object is the current user. Proof of Concept 1. Go to...

Cerebrate has an unspecified vulnerability

Cerebrate is an open source platform. Designed to act as an interconnected orchestrator for trusted contact information providers and other security tools, a security vulnerability exists in Cerebrate 1.4, which stems from the possibility of XSS occurring in the bookmark component. No detailed...

Cerebrate cross-site scripting vulnerabilities

Cerebrate is an open source platform. Designed to act as an interconnected orchestrator for trusted contact information providers and other security tools, a security vulnerability exists in Cerebrate 1.4, which stems from the possibility of XSS occurring in the bookmark component. No detailed...