w3m arbitrary code execution vulnerability (CNVD-2016-11680)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11161)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome. The vulnerability can be exploited by an attacker to execute arbitrary code in the browser context, disclose sensitive information or cause a denial of service...

CVE-2016-7198

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7195...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-10962)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A far-memory corruption vulnerability exists in Microsoft Internet Explorer versions 9 throu...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-10963)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explore versions 9 to 1...

Google Chrome Bookmarks Cross-Site Scripting Vulnerability

Google Chrome is a popular web browser. Google Chrome suffers from a cross-site scripting vulnerability. An attacker can exploit the vulnerability to execute arbitrary code in the context of the browser...

CVE-2016-5165

Cross-site scripting XSS vulnerability in the Developer Tools aka DevTools subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a...

Google Chrome Address Bar Forgery Vulnerability (CNVD-2016-07211)

Google Chrome is a web browser developed by the American company Google Google. An address bar forgery vulnerability exists in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit this vulnerability to forge the contents of the address bar...

Firefox, Chrome are caught: for the mainstream the browser's address fraud vulnerabilities-vulnerability warning-the black bar safety net

! Researcher Rafay Baloch yesterday disclosed the vulnerability details, he was in year 3, on Singapore's Black Hat Asia to do about the address bar spoofing of speech. The vulnerability principle Baloch in the personal web site said that the vulnerability of the main reason is that Chrome and...

Browser Address Bar Spoofing Vulnerability Disclosed

Chrome, Firefox and likely other major browsers are afflicted by a vulnerability that allows attackers to spoof URLs in the address bar. While Mozilla said it has patched the flaw in the affected Android version of the Firefox browser, Google said Chrome will be fixed in an upcoming September...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of JScript 9, VBScript, and Chakra JavaScript in Internet Explorer and Microsoft Edge browsers is due to buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web page...

The vulnerability of the Firefox browser, which allows a hacker to gain access to local files

The vulnerability of Firefox browsers is related to an improper limitation during the “drag-and-drop” operation for the file:URL object. Exploiting this vulnerability can allow a remote attacker to gain access to local files through a specially crafted website...

LocalTapiola: Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage

Hi, I am pretty sure that I found a vulnerability similar to https://hackerone.com/reports/135154. An adversary can use the "Lähetä viesti"-functionality of the LähiTapiola Asiakassalkku to send a malicious file. When the customer service opens the file, an XSS will execute and will leak user IP...

Gratipay: Host Header poisoning on gratipay.com

There is a host header poisoning vulnerability on gratipay.com that allows an attacker to cause a 301 redirect and poison the browser DNS cache to cause all further requests to gratipay.com to be redirected to the attacker's site. PoC Request: GET https://gratipay.com/ HTTP/1.1 Host: heroku.com...

Fast Browser Vulnerability

KChrome, derived from Google's open source project Chromium and compatible with IE, is a browser with dual kernels of Webkit and IE. Thanks to the high performance of Webkit, you will be faster when browsing the web in normal times. A design vulnerability exists in Crypto Browser that allows...

The vulnerability of the Internet Explorer browser allows a malicious actor to execute arbitrary code with privileges of the current user.

The Internet Explorer browser contains a vulnerability related to errors that occur due to incorrect access to objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with privileges of the current user...

The vulnerability of Google Chrome browser allows a remote attacker to execute arbitrary code.

The vulnerability of Google Chrome exists due to improper interaction between the IPC component, the Gamepad API, and Google V8. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Firefox browser, which allows a malicious attacker to execute arbitrary code or trigger a service denial.

The vulnerability of the asm.js component in the Firefox browser lies in its improper handling of safe exception handling during JIT-compilation and its access to dynamic memory. Exploiting this vulnerability allows a malicious actor to gain access to data in separate memory segments, and then...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the browser engine of Mozilla Firefox ESR allows malicious actors operating remotely to cause service failures memory errors and unexpected application termination or execute arbitrary code...