UBUNTU-CVE-2017-5417

When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects...

CVE-2017-6392

An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/adminconsole/web/tools/XmlJWPlayer.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the contex...

The vulnerability of Safari browser, the iOS operating system, and the multimedia player iTunes allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system, as well as in the multimedia player iTunes, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

LocalTapiola: Brute force unsubscription on /webApp/unsub_sb (viestinta.lahitapiola.fi)

Basic report information Summary: CSRF is an attack that tricks the victim into submitting a malicious request. It inherits the identity and privileges of the victim to perform an undesired function on the victim's behalf Description: Any user subscribed to Active Campaign, or admin too, attacker...

Google Chrome Blink Generic Cross-Site Scripting Vulnerability (CNVD-2017-02109)

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be executed with arbitrary code...

Multiple Cross-Site Scripting Vulnerabilities in ZoneMinder

ZoneMinder is a security monitoring software for cameras. ZoneMinder suffers from multiple cross-site scripting vulnerabilities that allow an attacker to remotely execute malicious scripts in the browser of an authenticated client...

UBUNTU-CVE-2017-5009

WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the PDFium component in the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through a specially created PDF file...

Vulnerabilities of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to trigger a service failure or execute arbitrary code

The vulnerability of The Chakra JavaScript extension in browsers Internet Explorer and Microsoft Edge arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruptio...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of The Chakra JavaScript browser extension in Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a...

115 Browser 7.2.5 RCE Vulnerability

Author: evi1m0sec.ly.com + Team: n0tr00t security team + From: http://www.n0tr00t.com + Create: 2015-12-26 DownProxy XSS view-source: http://m.115.com/downproxy.html javascript function localParamsearch, hash search = search || window. location. search; hash = hash || window. location. hash; var...

Mozilla Firefox URL Redirection Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A remote URL redirection vulnerability exists in Mozilla Firefox. An attacker can exploit this vulnerability by constructing a malicious URL to trick users into clicking on a link and being...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code...

w3m heap buffer overflow vulnerability

w3m is an open source text-based Web browser . A heap buffer overflow vulnerability exists in the 'addMultirowsForm' function in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to cause a denial of service...

w3m arbitrary code execution vulnerability (CNVD-2016-11680)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11161)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome. The vulnerability can be exploited by an attacker to execute arbitrary code in the browser context, disclose sensitive information or cause a denial of service...

CVE-2016-7198

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7195...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-10962)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A far-memory corruption vulnerability exists in Microsoft Internet Explorer versions 9 throu...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-10963)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explore versions 9 to 1...

Google Chrome Bookmarks Cross-Site Scripting Vulnerability

Google Chrome is a popular web browser. Google Chrome suffers from a cross-site scripting vulnerability. An attacker can exploit the vulnerability to execute arbitrary code in the context of the browser...