WebKit - 'FrameLoader::clear' Stealing Variables via Page Navigation

pageCacheState != Document::InPageCache ... mframe.document-prepareForDestruction; removeFocusedNodeOfSubtreemframe.document; ... mframe.setDocumentnullptr; domWindow; Click anywhere. function createURLdata, type = 'text/html' return URL.createObjectURLnew Blobdata, type: type; window.onclick = =...

Mail.ru: XSS в портальной навигации

Stored self-XSS in portal navigation via external account name...

CVE-2017-8876

Symphony 2 2.6.11 has XSS in the metanavigationgroup parameter to content/content.blueprintssections.php...

SQL injection vulnerability in the page_name parameter of the page.php page of the UX365 navigation system.

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system page.php page pagename parameter SQL...

Information disclosure

Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...

CVE-2017-5041

Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...

CVE-2017-5041

Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...

CVE-2017-5041

Removed by vendor...

CVE-2017-5041

Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...

KakaoMetro - Subway Navigation - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application KakaoMetro - Subway Navigation published at the 'play' market has multiple vulnerabilities...

CVE-2017-5041: Improper Input Validation

Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page...

harald-ebner.de XSS vulnerability

Open Bug Bounty ID: OBB-226735 Description| Value ---|--- Affected Website:| harald-ebner.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Uc365 website category navigation system link_logo parameter exists sql injection vulnerability

Uke365 website category navigation system is a cross-platform open source software , based on PHP + MYSQL development and construction of open source website category management system . Uke365 website category navigation system linklogo parameters exist sql injection vulnerability , due to the...

Chrome Universal XSS via same document navigations (CVE-2016-1711)

VULNERABILITY DETAILS FrameLoader::loadInSameDocument is vulnerable to a problem similar to the one described in issue 613266: void FrameLoader::loadInSameDocumentconst KURL& url, ... ... // If we have a provisional request for a different document, a fragment scroll should cancel it...

Youk365 Classifieds navigation system cate_deion parameter has sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, you can build up a classified directory or website navigation site. The catedeion parameter of the Uke365 classifieds navigation system suffers from a sql injection vulnerability. Allow attackers to explo...

Uc365 website category navigation system adver_name parameter exists sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system advername parameter there is a sql injectio...

CVE-2017-0888: User Interface (UI) Misrepresentation of Critical Information

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information...

PT-2017-10689 · Nextcloud · Nextcloud Server

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 9.0.55 Nextcloud Server versions prior to 10.0.2 Description: The issue concerns a Content-Spoofing vulnerability in the files app. It allows for partially user-controllable input in the top navigation bar o...

BadKernel Remote Code Execution Vulnerability in 2345 Website Navigation and 2345 Android Browser

2345 URL Navigation for Android is a built-in optimized browser software, 2345 Ace Browser for Android is a mobile browser. 2345 Website Navigation for Android V6.3.1 and 2345 Ace Browser for Android V8.6 use the Chrome V8 engine. The vulnerability is due to the "observeacceptinvalid" exception...

[SECURITY] Fedora 24 Update: w3m-0.5.3-30.git20170102.fc24

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...