DEBIAN-CVE-2017-1000035

Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack...

UBUNTU-CVE-2017-1000035

Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack...

WebKit: UXSS: CachedFrame doesn't detach openers(CVE-2017-2528)

When a document loads "about:blank" or "about:srcdoc", it tries to inherit the security origin from its parent frame, or its opener frame if the parent frame doesn't exist. Normally, it doesn't happen that a subframe's document inherits its opener frame's security origin, because it has the paren...

WebKit CachedFrame Universal Cross Site Scripting

WebKit: UXSS: CachedFrame doesn't detach openers CVE-2017-2528 When a document loads "about:blank" or "about:srcdoc", it tries to inherit the security origin from its parent frame, or its opener frame if the parent frame doesn't exist. Normally, it doesn't happen that a subframe's document inheri...

Nextcloud: URI scheme bypass in mail app lead to HTML content spoof and opener control

Bug When we load a HTML mail from mailbox via api, etc http://nextcloud/index.php/apps/mail/accounts//folders/SU5CT1g=/messages//html Our content will be passed to HTML Purifier to strip malicious XSS patterns. After that, an filter will apply to transform acceptable URI schemes http, https, ftp,...

PHP php_stream_zip_opener function integer overflow vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. An integer overflow vulnerability exists in the ext/zip/zipstream.c/phpstreamzipopener function in versions of PHP prior to 5.5.38, 5.6.x prior to 5.6.24, and...

UBUNTU-CVE-2016-6297

Integer overflow in the phpstreamzipopener function in ext/zip/zipstream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via a crafted zip:// URL...

PT-2016-3388

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.38 PHP versions 5.6.x prior to 5.6.24 PHP versions 7.x prior to 7.0.9 Description The issue is caused by an integer overflow in the php stream zip opener function, which can be exploited by remote attackers using a...

CVE-2015-5905

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...

CVE-2015-5905: Undefined Security Weakness

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...

PT-2015-2127

Name of the Vulnerable Software and Affected Versions Safari versions prior to 9 Description The issue is related to errors in security settings, allowing a remote attacker to exploit it and potentially spoof the relationship between URLs and web content. This can be achieved via a crafted window...

RollJam — $30 Device That Unlocks Almost Any Car And Garage Door

We have talked a lot about car hacking. Recently researchers even demonstrated how hackers can remotely hijack Jeep Cherokee to control its steering, brakes and transmission. Now, researchers have discovered another type of car hack that can be used to unlock almost every car or garage door. You...

Square: Redirect while opening link in new tabs

Description and Impact This bug has huge potential for tricking squareup.com that click on external links from this site to be a victim of a scam page because the redirecting is made in the background, while the user is focused on another tab. More then that, some browsers like Mozilla for Androi...

HackerOne: Window Opener Property Bug

The bug mentioned in 23386 is not yet correctly patched I believe. See, if a user sets his/her profile's website link to a similar page as mentioned in 23386. I mean a page that can manipulate the window.opener property would be able to accomplish similar results as in 23386 Proof-of-Concept: 1...

HackerOne: Redirect while opening links in new tabs

Hello HackerOne, I'd like to report to you a nice little bug about opening links in new tabs. When you open a link in a new tab target="blank" , the page that opens in a new tab can access the initial tab and change it's location using the window.opener property. POC:...

Free Opener Local Denial of Service

No description provided by source. !/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run script open with...

[SECURITY] Fedora 18 Update: kde-baseapps-4.10.4-1.fc18

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

[SECURITY] Fedora 19 Update: kde-baseapps-4.10.4-1.fc19

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

Free Opener Local Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run...

Free Opener Denial Of Service

!/usr/bin/perl Exploit Title: Free Opener Local Denial of Service Date: 09-12-11 Author: Iolo Morganwg Download: http://dl.installiq.com/download/downloadpop.aspx?shortname=freeopener&a=13193&f=FO-Main Tested on: Windows XP SP3 To trigger: Run script open with Free opener, program dies!. my $file...