4885 matches found
Pages can prevent navigation to a target page, spoofing the address field – Opera Security Advisories
When a user types a new URL for the browser to load, the currently active page may detect when the new page is about to load and prevent the navigation, while still leaving the new URL displayed in the address bar. This can then be used to spoof the URL of the target page. The malicious page woul...
Carefully timed reloads, redirects, and navigation can spoof the address field
The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site's address, while the attacking site is still being displaye...
Pages can prevent navigation to a target page, spoofing the address field
When a user types a new URL for the browser to load, the currently active page may detect when the new page is about to load and prevent the navigation, while still leaving the new URL displayed in the address bar. This can then be used to spoof the URL of the target page. The malicious page woul...
Hidden keyboard navigation can allow cross site scripting or code execution
When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...
Carefully timed reloads, redirects, and navigation can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site’s address, while the attacking site is still being displaye...
Hidden keyboard navigation can allow cross site scripting or code execution – Opera Security Advisories
When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...
Browsers Browsers - Navigation Download Trick
Browsers Browsers - Navigation Download Trick Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate...
Browser Navigation Download Trick (Chrome / IE / Firefox)
Exploit for multiple platform in category local exploits Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also...
Browser Navigation Download Trick
Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party documents to resources served with...
Browsers Browsers - Navigation Download Trick
Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party documents to resources served with...
Google Chrome < 19.0.1084.46 Multiple Vulnerabilities
Binary data 800898.prm...
Google Chrome < 19.0.1084.46 Multiple Vulnerabilities
Binary data 6487.pasl...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
Design/Logic Flaw
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
CVE-2011-3087
Chromium/Chrome impacted by CVE-2011-3087 (Incorrect window navigation). The connected OpenSUSE advisory shows the fix being applied via chromium updates to 21.0.1145, addressing the issue among other CVEs listed (e.g., 2011-3083 to 2011-3102). The root cause is reported as an incorrect window na...
Google Chrome < 19.0.1084.46 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 19.0.1084.46 and is, therefore, affected by the following vulnerabilities : - Video content with FTP can cause crashes. CVE-2011-3083 - Internal links are not loaded in their own process. CVE-2011-3084 - Lengthy auto-filled...
