CVE-2018-5109

CVE-2018-5109 : Firefox before 58 is vulnerable where an audio capture prompt can incorrectly display the origin. This can mislead users about which site requested audio capture. Affected: Firefox

CVE-2018-5109

An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This...

CVE-2018-5115: Exposure of Sensitive Information to an Unauthorized Actor

If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground page. Although the prompt contains the real domain making the request, this can result in user confusion about the originating site of the...

CVE-2017-5419: Undefined Security Weakness

If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service DOS attack. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2018-4202

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "iBooks" component. It allows man-in-the-middle attackers to spoof a password prompt...

Code injection

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "iBooks" component. It allows man-in-the-middle attackers to spoof a password prompt...

CVE-2018-4202

CVE-2018-4202 affects Apple iBooks in macOS High Sierra 10.13.4 and iOS before 11.4. The issue is an input-validation flaw in iBooks that could allow a privileged network-position attacker to spoof a password prompt. Apple’s security entries (HT208849, HT208848) note this vulnerability in the iBo...

CVE-2018-4202: Improper Input Validation

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "iBooks" component. It allows man-in-the-middle attackers to spoof a password prompt...

CVE-2018-1547

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security...

marleenmolenaar.com XSS vulnerability

Open Bug Bounty ID: OBB-628345 Description| Value ---|--- Affected Website:| marleenmolenaar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nike-huarache.co.nl XSS vulnerability

Open Bug Bounty ID: OBB-627917 Description| Value ---|--- Affected Website:| nike-huarache.co.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stammisedelsmid.nl XSS vulnerability

Open Bug Bounty ID: OBB-626030 Description| Value ---|--- Affected Website:| stammisedelsmid.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

detelefoongids.nl XSS vulnerability

Open Bug Bounty ID: OBB-624165 Description| Value ---|--- Affected Website:| detelefoongids.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NewsBee CMS 1.4 Cross Site Scripting

==================================================================================================================================== | Title : NewsBee CMS 1.4 xss Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro | | Vendor :...

saint-connec.fr XSS vulnerability

Open Bug Bounty ID: OBB-612958 Description| Value ---|--- Affected Website:| saint-connec.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pressloft.se XSS vulnerability

Open Bug Bounty ID: OBB-611669 Description| Value ---|--- Affected Website:| pressloft.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

marthaeverson.com XSS vulnerability

Open Bug Bounty ID: OBB-610142 Description| Value ---|--- Affected Website:| marthaeverson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cervejariaramiro.pt XSS vulnerability

Open Bug Bounty ID: OBB-609758 Description| Value ---|--- Affected Website:| cervejariaramiro.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

regional.bvsalud.org XSS vulnerability

Open Bug Bounty ID: OBB-609697 Description| Value ---|--- Affected Website:| regional.bvsalud.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pedigreequery.com XSS vulnerability

Open Bug Bounty ID: OBB-609503 Description| Value ---|--- Affected Website:| pedigreequery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...