resbook.net IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-623333 Description| Value ---|--- Affected Website:| resbook.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

zipy.co.il IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-623311 Description| Value ---|--- Affected Website:| zipy.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

dimensidata.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-622878 Description| Value ---|--- Affected Website:| dimensidata.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

bukupedia.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-622867 Description| Value ---|--- Affected Website:| bukupedia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

Tor: Tor Browser: iframe with `data:` uri has access to parent window

Version: 7.5.4 based on Mozilla Firefox 52.8.0 Tested with standard security slider. However, it's likely to be possible with a higher security level. Summary In Tor Browser iframe with data:uri inherits the origin of parent window. That leads to iframe has access to parent window. PoC Iframe cou...

alternate-tools.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-622735 Description| Value ---|--- Affected Website:| alternate-tools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

serranegra.rn.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-621387 Description| Value ---|--- Affected Website:| serranegra.rn.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

saomamede.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-621304 Description| Value ---|--- Affected Website:| saomamede.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

camarapatos.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-621303 Description| Value ---|--- Affected Website:| camarapatos.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

patos.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-621302 Description| Value ---|--- Affected Website:| patos.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

mesowest.utah.edu IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-621099 Description| Value ---|--- Affected Website:| mesowest.utah.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

findu.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-621097 Description| Value ---|--- Affected Website:| findu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

wnps.org IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-618808 Description| Value ---|--- Affected Website:| wnps.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11101

Open Whisper Signal aka Signal-Desktop through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. The attacker needs to send HTML code directly as a...

CVE-2018-11101

CVE-2018-11101 affects Signal Desktop (Open Whisper Signal) up to version 1.10.1. The vulnerability arises from incorrect handling of HTML when rendering quoted-reply messages, allowing XSS via HTML injected in a message that is later quoted/replied to. The root cause involved React dangerouslySe...

CVE-2018-0326

Cisco TelePresence Server Software web UI is affected by CVE-2018-0326 due to insufficient protections for HTML iframe embeds, enabling an unauthenticated attacker to perform a cross-frame scripting attack via a user-nes navigated, attacker-controlled page containing a malicious iframe. The resul...

PT-2018-10309

Name of the Vulnerable Software and Affected Versions Open Whisper Signal aka Signal-Desktop versions through 1.10.1 Description The issue allows for cross-site scripting XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution aft...

CVE-2018-11101: Improper Neutralization of Input During Web Page Generation

Open Whisper Signal aka Signal-Desktop through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. The attacker needs to send HTML code directly as a...

Signal Desktop HTML Tag Injection Variant 2

Title: Signal-desktop HTML tag injection variant 2 Date Published: 2018-05-16 Last Update: 2018-05-16 CVE Name: CVE-2018-11101 Class: Code injection Remotely Exploitable: Yes Locally Exploitable: No Vendors contacted: Signal.org Vulnerability Description: Signal-desktop is the standalone desktop...

policelink.monster.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-616311 Description| Value ---|--- Affected Website:| policelink.monster.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| hidden...