3304 matches found
Bitcoin Price Drops 20% After $72 Million in Bitcoin Stolen from Bitfinex Exchange
Yet another blow to Bitcoin: One of the world's most popular exchanges of the cryptocurrency has suffered a major hack, leading to a loss of around $72 Million worth of Bitcoins. Hong Kong-based Bitcoin exchange 'Bitfinex' has posted a note on their website announcing the shutdown of its operatio...
CVE-2016-5266
Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...
UBUNTU-CVE-2016-5266
Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...
KLA10852 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code, spoof user interface, bypass security restrictions, conduct cross-site scripting or read local...
Information disclosure and local file manipulation through drag and drop — Mozilla
Security researcher Rafael Gieschke reported that file URIs dragged from a web page in Firefox to other software do not have their contents properly filtered before being passed to other programs, such as the local file manager. This can allow for the theft or manipulation of arbitrary local file...
Cross-Site Scripting
Overview Affected versions of jqtree are vulnerable to cross-site scripting in the drag and drop functionality for modifying tree data. When a user attempts to drag a node to a different position in the hierarchy, script content existing within the node will be executed. Recommendation Update to...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
The vulnerability of Google Chrome allows a malicious actor to circumvent domain restriction rules.
The Google Chrome browser contains a vulnerability related to the implementation of drag-and-drop functionality. This vulnerability allows malicious actors to circumvent domain restrictions and replace local file paths by accessing resources through rendering. To exploit this vulnerability, activ...
Microsoft Internet Explorer Memory Corruption (MS16-063: CVE-2016-3211)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the drag and drop API call operations. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory...
Support drag-and-drop“click-hijacking vulnerability in”using the tools: CJExploiter-vulnerability warning-the black bar safety net
CJExploiter is a support drag-and-drop Clickjacking vulnerability using an auxiliary tool. First, in the local use browser to open“index.html”, enter the target URL and click on“View Site”to. You can customize the JS, and finally click on the“Exploit it”, you will be able to get the POC. !...
PHPmongoDB 1.0.0 - Multiple Vulnerabilities
PHPmongoDB 1.0.0 - Multiple Vulnerabilities Exploit Title: PHPmongoDB v1.0.0 - Multiple Vulnerabilities CSRF | HTMLor Iframe Injection | XSS Reflected & Stored Date: 14.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmongodb.org Software Link:...
Gummy Drop! - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Gummy Drop! published at the 'play' market has multiple vulnerabilities...
Drop Stack Plus - Block Tower - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drop Stack Plus - Block Tower published at the 'play' market has multiple vulnerabilities...
Drop Stack Christmas - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drop Stack Christmas published at the 'play' market has multiple vulnerabilities...
Word Drop : Best Family game - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Word Drop : Best Family game published at the 'play' market has multiple vulnerabilities...
The Horus Heresy: Drop Assault - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application The Horus Heresy: Drop Assault published at the 'play' market has multiple vulnerabilities...
Drop In The Cup - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Drop In The Cup published at the 'play' market has multiple vulnerabilities...
Nginx Web Application Firewall: NAXSI
NAXSI means Nginx Anti XSS & SQL Injection . Technically, it is a third party nginx module, available as a package for many UNIX-like platforms. This module, by default, reads a small subset of simple and readable rules containing 99% of known patterns involved in website vulnerabilities. For...
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
