Design/Logic Flaw

Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the 1 history.pushState and 2 history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information...

Opera < 11.62 Multiple Vulnerabilities

Binary data 6399.prm...

History.state can leak the state data from cross domain pages – Opera Security Advisories

When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...

History.state can leak the state data from cross domain pages

When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...

Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability (Linux)

This host is installed with Google Chrome and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromehistorynavigationcodeexecvulnlin.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability Linu...

Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability (MAC OS X)

This host is installed with Google Chrome and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromehistorynavigationcodeexecvulnmacosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability M...

Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability - Linux

Google Chrome is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability - Windows

Google Chrome is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome 'History navigation' Arbitrary Code Execution Vulnerability - Mac OS X

Google Chrome is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for arora FEDORA-2011-14719

Check for the Version of arora OpenVAS Vulnerability Test Fedora Update for arora FEDORA-2011-14719 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Linux Gather User History

This module gathers the following user-specific information: shell history, MySQL history, PostgreSQL history, MongoDB history, Vim history, lastlog, and sudoers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Linux Gather System and User Information

This module gathers system information. We collect installed packages, installed services, mount information, user list, user bash history and cron jobs This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Google Chrome < 17.0.963.78 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 17.0.963.78 and is, therefore, affected by the following vulnerabilities: - The application does not properly handle history navigation. - An unspecified universal cross-site scripting issue exists. By exploiting these...

CVE-2011-3046

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS UXSS" issue...

CVE-2011-3046

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS UXSS" issue...

Design/Logic Flaw

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS UXSS" issue...

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...

Design/Logic Flaw

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...

Google Patches Chrome Bugs Used in Pwnium Contest

VANCOUVER–Google has already patched the bugs used by researcher Sergey Glazunov to compromise Chrome on Wednesday as part of the company’s Pwnium contest at the CanSecWest conference here. The vulnerability that Glazunov was ablt to exploit is a universal XSS and bad history navigation bug in th...