4886 matches found
Chrome Universal XSS via same document navigations (CVE-2016-1711)
VULNERABILITY DETAILS FrameLoader::loadInSameDocument is vulnerable to a problem similar to the one described in issue 613266: void FrameLoader::loadInSameDocumentconst KURL& url, ... ... // If we have a provisional request for a different document, a fragment scroll should cancel it...
Youk365 Classifieds navigation system cate_deion parameter has sql injection vulnerability
Uc365 website classification and navigation system is a cross-platform open source software, you can build up a classified directory or website navigation site. The catedeion parameter of the Uke365 classifieds navigation system suffers from a sql injection vulnerability. Allow attackers to explo...
Uc365 website category navigation system adver_name parameter exists sql injection vulnerability
Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system advername parameter there is a sql injectio...
PT-2017-10689 · Nextcloud · Nextcloud Server
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 9.0.55 Nextcloud Server versions prior to 10.0.2 Description: The issue concerns a Content-Spoofing vulnerability in the files app. It allows for partially user-controllable input in the top navigation bar o...
wuzz - Interactive CLI Tool for HTTP Inspection
Interactive cli tool for HTTP inspection Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage $ go get github.com/asciimoo/wuzz $...
BadKernel Remote Code Execution Vulnerability in 2345 Website Navigation and 2345 Android Browser
2345 URL Navigation for Android is a built-in optimized browser software, 2345 Ace Browser for Android is a mobile browser. 2345 Website Navigation for Android V6.3.1 and 2345 Ace Browser for Android V8.6 use the Chrome V8 engine. The vulnerability is due to the "observeacceptinvalid" exception...
[SECURITY] Fedora 24 Update: w3m-0.5.3-30.git20170102.fc24
The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...
CVE-2017-6916
CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...
Cross site request forgery (csrf)
CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6918
CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6916
CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6918
BigTree CMS 4.2.16 exposes a CSRF vulnerability via the value[#][*] parameter to the /admin/settings/update/ page, which can change Navigation Social settings. Affected component is the admin settings handler; root cause is cross-site request forgery without user interaction risk details provided...
chromium-browser: address spoofing in omnibox
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
UBUNTU-CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...
Advantech WebAccess < 7.2-2014.06.06 Multiple Vulnerabilities
Binary data 9958.prm...
Design/Logic Flaw
IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain...
