The vulnerability of the Firefox browser, which allows a remote attacker to forge cross-site requests

The vulnerability of the Firefox browser in the navigator.sendBeacon function, related to the processing of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted web page...

The vulnerability of the Thunderbird email client, which allows a remote attacker to forge cross-site requests

A vulnerability exists in the Thunderbird email client’s navigator.sendBeacon function, related to the handling of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted we...

Vulnerability of the Internet Explorer browser, leading to the disclosure of confidential information

The Internet Explorer browser contains a vulnerability related to domain-level restrictions. Exploiting this vulnerability allows a malicious individual to gain access to confidential information through a specially crafted web page that the user visits. If successful, the malicious individual wi...

The vulnerability of the Firefox browser, which allows a malicious individual to gain access to confidential information

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the SVG filter. This vulnerability allows malicious actors to gain access to confidential information about displacement and correlations, as well as to circumvent domain restriction policies SOP. They...

The vulnerability of the Firefox browser allows a malicious actor to bypass the restrictions.

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the WebGL.compressedTexImage2D and WebGL.compressedTexSubImage2D functions. Exploiting this vulnerability allows malicious actors to bypass domain restrictions and display content from another domain...

CVE-2016-2833

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

Cross site scripting

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

CVE-2016-2833

CVE-2016-2833 affects Mozilla Firefox prior to 47.0, where CSP checks are bypassed for cross-domain Java applets. This CSP bypass could enable remote attackers to perform cross-site scripting (XSS) via a crafted applet. The available connected sources confirm Firefox versions affected and referen...

CVE-2016-2833

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

CVE-2016-2833: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

UBUNTU-CVE-2016-2833

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

mediawiki -- multiple vulnerabilities

Mediawiki reports: Security fixes: T122056: Old tokens are remaining valid within a new session T127114: Login throttle can be tricked using non-canonicalized usernames T123653: Cross-domain policy regexp is too narrow T123071: Incorrectly identifying http link in a's href attributes, due to m...

Microsoft Office 3 6 5 platform SAML service vulnerability, unauthorized access to other users of the resource-vulnerability warning-the black bar safety net

! Recently, two security researchers, Klemen Bratec and Ioannis Kakavas, announced they found one in Microsoft Office 3 6 5 platform on the SAML service vulnerability that can be exploited to perform cross-domain authentication bypass, and eventually to 3 6 5 on the platform of the all the Federa...

CVE-2015-5170-5173 UAA Vulnerabilities | Cloud Foundry

CVE-2015-5170-5173 UAA Vulnerabilities Low Vendor Cloud Foundry Foundation Versions Affected cf-release versions v215 & prior UAA versions 2.5.1 & prior Description CSRF Attack on PWS. It is possible to log the user into another account instead of the account they intended to log into because of...

Microsoft Edge elevation of privilege vulnerability (CNVD-2016-02283)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An elevation of privilege vulnerability exists in Microsoft Edge that stems from the program failing to properly enforce cross-domain policies. A remote attacker...

Microsoft Edge Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is used ...

PT-2016-1681

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in security settings, allowing a remote attacker to bypass existing access restriction policies. It is an elevation of privilege vulnerability that occur...

MS16-038: Cumulative Security Update for Microsoft Edge (3148532)

The version of Microsoft Edge installed on the remote host is missing Cumulative Security Update 3148532. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. An attacker can exploit these...

Internet Explorer cross-domain policy bypass

Overview Internet Explorer contains a flaw that may allow an attacker to bypass cross-domain policies. Yosuke HASEGAWA of Secure Sky Technology Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When a...

Microsoft Internet Explorer Remote Elevation of Privilege Vulnerability (CNVD-2016-01168)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer versions 9 through 11 do not properly implement cross-domain policies and have an elevation of privilege vulnerability that can be successfully exploited to gain access to information from other domains and then inject...