PT-2015-1193

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.65 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing, due to the inheritance of the designMo...

PT-2015-1192

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.65 Description The issue is related to errors in the HTMLConstructionSite.cpp file in the DOM implementation in Blink, used in Google Chrome. It allows remote attackers to bypass the Same Origin Policy...

CVE-2015-2718

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

Design/Logic Flaw

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

CVE-2015-2718

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

CVE-2015-2718

CVE-2015-2718 – Firefox WebChannel.jsm Same-Origin Policy bypass . Affected software: Mozilla Firefox versions prior to 38.0. The issue allows a remote attacker to obtain sensitive webchannel-response data by loading a crafted page in an IFRAME from a different site, bypassing the Same Origin Pol...

CVE-2015-2718: Exposure of Sensitive Information to an Unauthorized Actor

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

Mozilla Firefox 'WebChannel.jsm' Same-Origin Policy Bypass Vulnerability

Mozilla Firefox is a popular open source WEB browser. Mozilla Firefox 'WebChannel.jsm' fails to properly handle message communication, allowing remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them, which can be bypassed by a same-origin poli...

CVE-2015-2718

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

UBUNTU-CVE-2015-2718

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data...

PT-2015-5855

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 38.0 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data. This can be achieved via a crafted web site containing an IFRAME element...

Adobe Flash Player Same Origin Policy Bypass (APSB14-21: CVE-2014-0548)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

CVE-2015-1156

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, vi...

CVE-2015-1155

The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site...

CVE-2015-1156

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, vi...

Design/Logic Flaw

The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site...

UBUNTU-CVE-2015-1156

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, vi...

Design/Logic Flaw

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, vi...

CVE-2015-1155: Undefined Security Weakness

The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site...

Apple Safari WebKit bypasses same-origin policy vulnerability (CNVD-2015-02943)

WebKit is the open source web browser engine currently used by Safari, Chrome and other browsers. A bypass same-origin policy vulnerability exists in Apple Safari before 6.2.6, 7.1.6 before 7.x,8.0.6 before 8.x using WebKit's history implementation, which allows remote attackers to bypass the...