PT-2016-6269

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.89 on Windows and OS X Google Chrome versions prior to 53.0.2785.92 on Linux Opera affected versions not specified Description The issue arises from the extensions subsystem relying on an IFRAME source...

Mozilla Firefox ESR < 45.3 Multiple Vulnerabilities

Binary data 9485.prm...

ua.trovit.com IFRAME Injection vulnerability

Vulnerable URL: http://ua.trovit.com/rabota/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 22.07.2017 Latest check for patch:| 22.07.2017 05:19 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclos...

ru.trovit.com IFRAME Injection vulnerability

Vulnerable URL: http://ru.trovit.com/rabota/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 22.07.2017 Latest check for patch:| 22.07.2017 05:18 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclos...

de.trovit.com IFRAME Injection vulnerability

Vulnerable URL: http://de.trovit.com/jobs/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 21.07.2017 Latest check for patch:| 21.07.2017 13:31 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed...

springmeadownursery.com IFRAME Injection vulnerability

Vulnerable URL: http://springmeadownursery.com/search.php?q=%3Ciframe+src%3D%22http%3A%2F%2Fwww.openbugbounty.org%22%3E%3C%2Fiframe%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:35 GMT Vulnerability type:| IFRAME Injection Vulnerability...

library.msu.ac.th IFRAME Injection vulnerability

Vulnerable URL: http://library.msu.ac.th/webu/dublin.linkout.php?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:56 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa...

ostwuerttemberg.de IFRAME Injection vulnerability

Vulnerable URL: http://www.ostwuerttemberg.de/de/fde.asp?page=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 16280167 VIP website status:...

118go.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-174081 Description| Value ---|--- Affected Website:| 118go.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

colorado.edu IFRAME Injection vulnerability

Vulnerable URL: http://www.colorado.edu/eventscalendar/cgi-bin/frame.cgi?parent=viewURL=https://www.openbugbounty.org" name="bottom" frameborder="no" marginwidth="0" marginheight="0" Details: Description| Value ---|--- Patched:| Yes, at 27.08.2016 Latest check for patch:| 27.08.2016 08:17 GMT...

yellowpages.com.vn IFRAME Injection vulnerability

Vulnerable URL: http://www.yellowpages.com.vn/homepages.php?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 1752205 VIP website status:| No...

Microsoft Internet Explorer Local Filename Information Disclosure Vulnerability

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer has different feedback in the file:// URL for existing and non-existing files, and if used in conjunction with an HTML5 sandbox iframe, a local attacker could exploit this vulnerability to obtain local file existence...

CVE-2016-3321

Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure...

CVE-2016-3321: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure...

PT-2016-2568

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Description The issue allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe. This is due to Internet Explorer loading different files for attemp...

August 9, 2016 — KB3176493 (OS Build 10586.545)

None None...

August 9, 2016 — KB3176492 (OS Build 10240.17071)

None None...

egitimcafe.com IFRAME Injection vulnerability

Vulnerable URL: http://egitimcafe.com/redirector.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 3580765 VIP website status:| No...

CVE-2016-1474

Cisco Prime Infrastructure 2.22 does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCuw65846, a different...

CVE-2016-1474: Improper Access Control

Cisco Prime Infrastructure 2.22 does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCuw65846, a different...