chromium-browser: ui spoofing in blink

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page...

chromium-browser: ui spoofing

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page...

chromium-browser: address spoofing in omnibox

Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

FiercePhish - A Full-Fledged Phishing Framework To Manage All Phishing Engagements

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more. The features will continue to be expanded and will include website spoofing, click tracking, and extensive notificati...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing attackers to inject arbitrary Web or HTML code

The vulnerabilities of Internet Explorer and Microsoft Edge exist due to the lack of measures taken to protect the structure of web pages. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code using undefined vectors...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Internet Explorer and Microsoft Edge arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption by using a specially crafted web page...

Informatica: [ipm.informatica.com]- Broken Authentication

The Researcher was able to visit the internal pages of the application by changing few parameters in the URL. We have identified it as broken authenticated page display. Due to the EOL of the application, it was decommissioned. i was able to bypass authentication on one of the internal app. for...

UBUNTU-CVE-2017-5378

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird 45.7, Firefox ESR 45....

UBUNTU-CVE-2017-5391

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox 51...

Security vulnerabilities fixed in Firefox 51 — Mozilla

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potential...

Design/Logic Flaw

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

About the security content of OS X Server 5.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Bitdefender Internet Security NSIS Pages Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2016-5212

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...

IBM Kenexa LMS on Cloud Information Disclosure Vulnerability (CNVD-2017-00569)

IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS from IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and share their...

Pirelli DRG A115 ADSL Router DNS Changer

!/bin/bash Pirelli DRG A115 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

Don't Fall For This Dangerously Convincing Ongoing Phishing Attack

Security researchers have discovered a new phishing campaign targeting Gmail users, which is so convincing and highly effective that even tech-savvy people can be tricked into giving away their Google credentials to hackers. The attackers first compromise a victim's Gmail account, and once they a...

MC Yellow Pages Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: İhsan Şencan Author...

MC Yellow Pages SQL Injection

Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktane...

MC Yellow Pages Script - SQL Injection

Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet S...