133 matches found
Design/Logic Flaw
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...
CVE-2017-17692
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...
CVE-2017-17692
CVE-2017-17692 affects Samsung Internet Browser 5.4.02.3. A vulnerability allows remote attackers to bypass the Same Origin Policy by serving crafted JavaScript that redirects to a child tab and rewrites the innerHTML, enabling information disclosure. Public materials in connected docs describe p...
CVE-2017-17692
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...
PT-2017-14952
Name of the Vulnerable Software and Affected Versions Samsung Internet Browser version 5.4.02.3 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code. This is achieved by redirecting to a child tab and rewriting...
CVE-2017-17692: Exposure of Sensitive Information to an Unauthorized Actor
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...
Samsung Internet Browser SOP Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the...
Samsung Internet Browser - SOP Bypass (Metasploit)
Samsung Internet Browser - SOP Bypass Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a...
Samsung Internet Browser - SOP Bypass Exploit
Exploit for Android platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of ...
Samsung Internet Browser - SOP Bypass (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samsung Internet Browser SOP Bypass', 'Description' = %q This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the...
Samsung Internet Browser SOP Bypass
This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the Samsung Internet Browser, a popular mobile browser shipping with Samsung Android devices. By default, it initiates a redirect to a child tab, and rewrites the innerHTML to gather credentials via a fake pop-up...
4G Internet Browser - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application 4G Internet Browser published at the 'play' market has multiple vulnerabilities...
3G - 4G Fast Internet Browser - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application 3G - 4G Fast Internet Browser published at the 'play' market has multiple vulnerabilities...
IE browser exploit technical evolution of the(a)-vulnerability warning-the black bar safety net
! IE browser exploits technology evolution Note: the article relates to the software, or dll, that is the final exp: https://yunpan.cn/OckK8EjZnR9cGj （extraction code: 2a79 Today, the browser is the user access to the Internet portal. The browser was born from the beginning of the Main to provide...
Information disclosure
The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4905
The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4905
The CVE-2014-4905 entry affects The Clean Internet Browser (com.cleantab.browsesecure) for Android, version 1.36. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...
CVE-2014-4905: Undefined Security Weakness
The Clean Internet Browser aka com.cleantab.browsesecure application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6206
Name of the Vulnerable Software and Affected Versions The Clean Internet Browser aka com.cleantab.browsesecure version 1.36 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.50...
SHOUTcast DNAS 2.2.1 - Stored XSS
No description provided by source. There is an XSS\HTML Injection in a song history in song history, allowing inject a JavaScript script or HTML code in site. PoC: 1. Open yours MP3 file setting, and open details overlap. 2. In the title field enter your HTML code 3. Start streaming your MP3 file...