CVE-2018-4173

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app...

CVE-2018-4173

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app...

PT-2018-16456

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 macOS versions prior to 10.13.4 Description The issue involves the Status Bar component and allows for invisible microphone access via a crafted app. Recommendations For iOS versions prior to 11.3, update to version...

CVE-2018-4173: Improper Privilege Management

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app...

Cross-site Scripting (XSS)

github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through the status bar filepath variable...

Brave Status Bar Obfuscation Vulnerability

Brave is a Web browser product from Brave Software, Inc. in the United States. A status bar obfuscation vulnerability exists in Brave version 0.12.4, which may unintentionally redirect to a malicious website. An attacker can exploit this vulnerability to redirect users to malicious websites,...

CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

CVE-2017-8459

The CVE-2017-8459 entry concerns Brave 0.12.4 with a Status Bar Obfuscation flaw where a redirection target may appear in an unexpected way. CNVD-2017-06047 explicitly notes that an attacker could redirect users to malicious websites, leading to disclosure of personal information or property dama...

CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

CVE-2017-8459: Undefined Security Weakness

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

PT-2017-18349 · Brave · Brave

Name of the Vulnerable Software and Affected Versions: Brave version 0.12.4 Description: The issue concerns a Status Bar Obfuscation problem where a redirection target is displayed in a potentially unexpected manner. This behavior might have legitimate uses, such as in the display of web-search...

Brave Software: Status Bar Obfuscation

Summary: In this issue, Brave's Status Bar will show the link where the user will be redirected but after he clicks the link, he redirected to other website. Products affected: Latest Version of Brave Steps To Reproduce: 1. Open the HTML file 2. You will see a hyperlink of google.com, So hover yo...

Opera Web Browser 8.0/8.5 HTML Form Status Bar Misrepresentation Vulnerability

source: http://www.securityfocus.com/bid/15472/info A vulnerability has been identified in Opera Web browser that allows an attacker to misrepresent the status bar in the browser, allowing vulnerable users to be mislead into following a link to a malicious site. This vulnerability would most...

Mozilla Suite/Firefox/Thunderbird Nested Anchor Tag Status Bar Spoofing Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12798/info Mozilla Suite/Firefox and Thunderbird are reported prone to a URI obfuscation weakness. The issue is reported to manifest when 'Save Link As...' functionality is invoked on an malicious anchor tag. This issue m...

Apple Safari Web Browser 1.x HTML Form Status Bar Misrepresentation Vulnerability

source: http://www.securityfocus.com/bid/11949/info A vulnerability has been identified in Apple Safari Web Browser that allows an attacker to misrepresent the status bar in the browser, allowing vulnerable users to be mislead into following a link to a malicious site. The issue presents itself...

Apple Safari 1.2 Web Browser TABLE Status Bar URI Obfuscation Weakness

A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present web pages to users that seem to originate from a trusted location. Click...

Microsoft Internet Explorer 5.0.1 Mouse Event URI Status Bar Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false...