Google Chrome Blink Generic Cross-Site Scripting Vulnerability (CNVD-2017-02109)

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be executed with arbitrary code...

Multiple Cross-Site Scripting Vulnerabilities in ZoneMinder

ZoneMinder is a security monitoring software for cameras. ZoneMinder suffers from multiple cross-site scripting vulnerabilities that allow an attacker to remotely execute malicious scripts in the browser of an authenticated client...

UBUNTU-CVE-2017-5009

WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the PDFium component in the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through a specially created PDF file...

Vulnerabilities of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to trigger a service failure or execute arbitrary code

The vulnerability of The Chakra JavaScript extension in browsers Internet Explorer and Microsoft Edge arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruptio...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of The Chakra JavaScript browser extension in Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a...

115 Browser 7.2.5 RCE Vulnerability

Author: evi1m0sec.ly.com + Team: n0tr00t security team + From: http://www.n0tr00t.com + Create: 2015-12-26 DownProxy XSS view-source: http://m.115.com/downproxy.html javascript function localParamsearch, hash search = search || window. location. search; hash = hash || window. location. hash; var...

Mozilla Firefox URL Redirection Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A remote URL redirection vulnerability exists in Mozilla Firefox. An attacker can exploit this vulnerability by constructing a malicious URL to trick users into clicking on a link and being...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code...

w3m heap buffer overflow vulnerability

w3m is an open source text-based Web browser . A heap buffer overflow vulnerability exists in the 'addMultirowsForm' function in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11680)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11161)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome. The vulnerability can be exploited by an attacker to execute arbitrary code in the browser context, disclose sensitive information or cause a denial of service...

CVE-2016-7198

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7195...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-10962)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A far-memory corruption vulnerability exists in Microsoft Internet Explorer versions 9 throu...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-10963)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explore versions 9 to 1...

Google Chrome Bookmarks Cross-Site Scripting Vulnerability

Google Chrome is a popular web browser. Google Chrome suffers from a cross-site scripting vulnerability. An attacker can exploit the vulnerability to execute arbitrary code in the context of the browser...

CVE-2016-5165

Cross-site scripting XSS vulnerability in the Developer Tools aka DevTools subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a...

Google Chrome Address Bar Forgery Vulnerability (CNVD-2016-07211)

Google Chrome is a web browser developed by the American company Google Google. An address bar forgery vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to forge the contents of the address bar...

Firefox, Chrome are caught: for the mainstream the browser's address fraud vulnerabilities-vulnerability warning-the black bar safety net

! Researcher Rafay Baloch yesterday disclosed the vulnerability details, he was in year 3, on Singapore's Black Hat Asia to do about the address bar spoofing of speech. The vulnerability principle Baloch in the personal web site said that the vulnerability of the main reason is that Chrome and...

Browser Address Bar Spoofing Vulnerability Disclosed

Chrome, Firefox and likely other major browsers are afflicted by a vulnerability that allows attackers to spoof URLs in the address bar. While Mozilla said it has patched the flaw in the affected Android version of the Firefox browser, Google said Chrome will be fixed in an upcoming September...