3660 matches found
Information disclosure and local file manipulation through drag and drop — Mozilla
Security researcher Rafael Gieschke reported that file URIs dragged from a web page in Firefox to other software do not have their contents properly filtered before being passed to other programs, such as the local file manager. This can allow for the theft or manipulation of arbitrary local file...
Cross-Site Scripting
Overview Affected versions of jqtree are vulnerable to cross-site scripting in the drag and drop functionality for modifying tree data. When a user attempts to drag a node to a different position in the hierarchy, script content existing within the node will be executed. Recommendation Update to...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
The vulnerability of Google Chrome allows a malicious actor to circumvent domain restriction rules.
The Google Chrome browser contains a vulnerability related to the implementation of drag-and-drop functionality. This vulnerability allows malicious actors to circumvent domain restrictions and replace local file paths by accessing resources through rendering. To exploit this vulnerability, activ...
Microsoft Internet Explorer Memory Corruption (MS16-063: CVE-2016-3211)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the drag and drop API call operations. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory...
Support drag-and-drop“click-hijacking vulnerability in”using the tools: CJExploiter-vulnerability warning-the black bar safety net
CJExploiter is a support drag-and-drop Clickjacking vulnerability using an auxiliary tool. First, in the local use browser to open“index.html”, enter the target URL and click on“View Site”to. You can customize the JS, and finally click on the“Exploit it”, you will be able to get the POC. !...
PHPmongoDB 1.0.0 - Multiple Vulnerabilities
PHPmongoDB 1.0.0 - Multiple Vulnerabilities Exploit Title: PHPmongoDB v1.0.0 - Multiple Vulnerabilities CSRF | HTMLor Iframe Injection | XSS Reflected & Stored Date: 14.04.2016 Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmongodb.org Software Link:...
Gummy Drop! - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Gummy Drop! published at the 'play' market has multiple vulnerabilities...
Drop Stack Plus - Block Tower - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drop Stack Plus - Block Tower published at the 'play' market has multiple vulnerabilities...
Drop Stack Christmas - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Drop Stack Christmas published at the 'play' market has multiple vulnerabilities...
Word Drop : Best Family game - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Word Drop : Best Family game published at the 'play' market has multiple vulnerabilities...
The Horus Heresy: Drop Assault - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application The Horus Heresy: Drop Assault published at the 'play' market has multiple vulnerabilities...
Drop In The Cup - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Drop In The Cup published at the 'play' market has multiple vulnerabilities...
Nginx Web Application Firewall: NAXSI
NAXSI means Nginx Anti XSS & SQL Injection . Technically, it is a third party nginx module, available as a package for many UNIX-like platforms. This module, by default, reads a small subset of simple and readable rules containing 99% of known patterns involved in website vulnerabilities. For...
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
uswitch.com XSS vulnerability
Vulnerable URL: http://www.uswitch.com/gas-electricity/drop?postcode=...
The vulnerability of the RoundCube Webmail email client on the operating system openSUSE allows a hacker to execute cross-site scripting attacks.
The vulnerability in the program/js/app.js component of the RoundCube Webmail client for the openSUSE operating system exists due to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attack...
Roundcube webmail cross-site scripting vulnerability
RoundCube Webmail is a browser-based IMAP client. A cross-site scripting vulnerability in program/js/app.js in Roundcube webmail versions prior to 1.0.7, 1.1.x-1.1.3 allows remote attackers to inject arbitrary web script or HTML by dragging and dropping the filename in a file upload...
DEBIAN-CVE-2015-8105
Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...
UBUNTU-CVE-2015-8105
Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...