CVE-2019-13708

Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2019-13704

Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page...

October 15, 2019-KB4519564 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

None None...

October 15, 2019-KB4519562 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 and Windows Server 2016

None None...

File upload vulnerability in the background of Guojiz Web Site Navigation System V2.3.5

Guojiz website navigation system is a navigation website source code developed by PHP+MySQL with MYSQL database. A file upload vulnerability exists in the backend of Guojiz URL Navigation System V2.3.5. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

CVE-2019-9534

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to...

CVE-2018-17464

Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2019-5794

Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Android Security Bulletin—October 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-10-06 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

Amazon Linux 2 : thunderbird (ALAS-2019-1304)

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation cou...

Important: thunderbird

Issue Overview: Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin poli...

HRShell - An Advanced HTTPS/HTTP Reverse Shell Built With Flask

HRShell: An advanced HTTPSReverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask. It's compatible with python 3.x and has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave Windows 7/10 Features It's stealthy TLS support Either usin...

DEBIAN-CVE-2019-11743

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history throu...

Mozilla: Cross-origin access to unload event attributes

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history throu...

Mozilla: Cross-origin access to unload event attributes

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin. This resulted in potential cross-origin information exposure of history throu...

XSS Vulnerability in Guojiz URL Navigation System (CNVD-2019-35037)

Guojiz website navigation system is a navigation website source code system developed by PHP+MySQL. Guojiz navigation system XSS vulnerability, an attacker can exploit the vulnerability to obtain background user cookie information...

XSS Vulnerability in Guojiz URL Navigation System (CNVD-2019-35035)

Guojiz website navigation system is a navigation website source code system developed by PHP+MySQL. Guojiz navigation system XSS vulnerability, an attacker can exploit the vulnerability to obtain background user cookie information...

Override access vulnerability in Guojiz web site navigation system

Guojiz website navigation system is a navigation website source code system developed by PHP+MySQL. Guojiz website navigation system has an override access vulnerability that can be exploited by an attacker to change any user's password...

XSS vulnerability in Guojiz URL navigation system (CNVD-2019-35041)

Guojiz website navigation system is a navigation website source code system developed by PHP+MySQL. Guojiz navigation system XSS vulnerability, an attacker can exploit the vulnerability to obtain background user cookie information...

Cross Origin Access

firefox is vulnerable to cross-origin access. The vulnerability exists due to not the adhering to the W3C's Navigation-Timing Level 2 which allows an attacker to do potential cross-origin information exposure of history via timing side-channel attacks...