493 matches found
CVE-2018-17477
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
chromium-browser: UI spoof in Extensions
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
Google Chrome Extensions UI Spoofing Vulnerability
Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 70.0.3538.67. The vulnerability can be exploited by remote attackers to spoof the contents of an extension pop-up...
'HoeflerText' Popups Target Browsers With RAT and Locky Ransomware
A malware campaign utilizing bogus popups that alert users to a missing web-font is targeting Google Chrome and Firefox browser users. The popups contain a malicious JavaScript file that initiates the download of either the NetSupport Manager remote access tool RAT or Locky ransomware. The...
Signed Mughthesec Adware Hijacking Macs for Profit
A variant of an older piece of adware built for Macs called OperatorMac has been seen in the wild, and while like most adware it tries to turn a profit, it also illustrates some defensive shortcomings native to Apple’s ecosystem and the industry. Components of the new strain, which is called...
Reflective XSS Cross-Site Scripting Vulnerability in TRS WCM Content Collaboration Platform
The TRS WCM Content Collaboration Platform TRS WCM is a content management system. The TRS WCM Content Collaboration Platform suffers from a reflected XSS cross-site scripting vulnerability. The UserName fails to effectively filter user-submitted data, allowing an attacker to construct XSS...
nexweb15.nexsure.com XSS vulnerability
Vulnerable URL: https://nexweb15.nexsure.com/popups/minical.asp?element=EffDate=edits=1"...
Reflected Cross-Site Scripting Vulnerability in the usbkey_Serial Parameter of the Enterprise Intelligence Network Management System
Enterprise Intelligence products are intranet management expert services. A reflective cross-site scripting vulnerability exists in the usbkeySerial parameter of the Enterprise Intelligence network management system. It allows an attacker to construct an XSS statement to directly trigger a pop-up...
Mozilla Firefox MFSA Print Preview Spoofing Vulnerability
Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox. If pop-up windows are enabled, a malicious website may spoof the contents of the print preview window, causing users to confuse the currently loaded site...
Code injection
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...
CVE-2017-2371
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...
CVE-2017-2371
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...
CVE-2017-2371
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...
CVE-2017-2371
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...
Google Chrome < 53.0.2785.113 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 53.0.2785.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113...
python-django cross-site scripting vulnerability
Django is the open source Python Web application development framework. A security vulnerability exists in Django incorrectly handling administrator add/change related popups. A remote attacker could exploit this vulnerability to perform cross-site scripting attacks...
CVE-2015-7518
Multiple cross-site scripting XSS vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via 1 global parameters, 2 smart class parameters, or 3 smart variables in the a host or b hostgroup edit forms...
Syrian Electronic Army Hacks UK based Media Websites
Syrian Electronic Army SEA, a pro-hacker group supposed to be aligned with Syrian President Bashar al-Assad has again gain media attention by compromising a number of popular news websites and displayed a Thanksgiving popups informing people that they've been hacked. The Forbes, The Independent,...
X (Formerly Twitter): XSS platform.twitter.com
Since you have fixed a few problems with the FlashTransport on platform.twitter.com already, I though I would also take a look at the JavaScript around it. Problem URL: https://platform.twitter.com/widgets/hub.html Description: The mentioned page opens URLs send to it via postMessage or...
Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups
No description provided by source. Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 HTML HEAD SCRIPT...