Apple Safari URI spoofing (CVE-2015-5764)

tl;dr Apple Safari for OS X was prone to URI spoofing vulnerability and more general a user interface spoofing. Apple released security updates for Safari 9 on OS X and assigned CVE-2015-5764. Accidentally this vulnerability was also present in iOS. Instant demo In Safari up to 8.0.8 : go to clic...

IBM OpenPages GRC Platform Cross-Site Request Forgery Vulnerability

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site request forgery vulnerability exists in IBM OpenPages GRC Platform that allows a remote attacker to construct a malicious URI, trick a user into...

Mozilla Firefox and Firefox ESR HTMLVideoElement Interface Memory Error Vulnerability

Mozilla Firefox is an open source web browser. A memory error vulnerability exists in the Mozilla Firefox HTMLVideoElement interface, which allows remote attackers to modify the JavaScript code of the media element URI form to crash the application or execute arbitrary code...

Cisco TelePresence Server Software Cross-Site Request Forgery Vulnerability

Cisco TelePresence Server Software is a videoconferencing solution known as a "telepresence" system. A cross-site request forgery vulnerability exists in Cisco TelePresence Server Software that could allow a remote attacker to construct a malicious URI, trick a user into resolving it, and perform...

Design/Logic Flaw

Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176...

CVE-2015-4509

Mozilla Firefox: CVE-2015-4509 is a use-after-free in the HTMLVideoElement interface that could let remote attackers execute arbitrary code via crafted JavaScript manipulating a media element URI table (aka ZDI-CAN-3176). Affected versions are Firefox before 41.0 and Firefox ESR 38.x before 38.3....

CVE-2015-4509

Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176...

CVE-2015-4509

Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176...

Drupal OSF Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in the Drupal OSF module when the OSF Ontology and OSF Import modules are enabled in the program, which allows remote attackers to construct malicious URIs, trick users...

Securifi Almond Cross-Site Request Forgery Vulnerability

Securifi Almond is a wireless router product from Securifi. Securifi Almond uses a default password and suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context...

Orient Technologies Studio for OrientDB Server Community Edition Cross-Site Request Forgery Vulnerability

Orient Technologies Studio for OrientDB Server Community Edition is a community edition of OrientDB Server from Orient Technologies, UK. A cross-site request forgery vulnerability exists in Orient Technologies Studio for OrientDB Server Community Edition, which allows remote attackers to construc...

PT-2015-2135

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue is related to insufficient input validation in the Safari browser's user interface on the iOS operating system. This could allow a remote attacker to exploit the issue and replace a...

PT-2015-2134

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue is related to insufficient input validation in the Safari browser's user interface on the iOS operating system. This could allow a remote attacker to exploit the issue and substitute...

PT-2015-2136

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue is related to insufficient input validation in the Safari browser's user interface on the iOS operating system. This could allow a remote attacker to exploit the issue and substitute...

Cross site scripting

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting XSS attacks via a base64 encoded data URI, as demonstrated by the 1 returnUrl parameter to showrechis.php and...

CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting XSS attacks via a base64 encoded data URI, as demonstrated by the 1 returnUrl parameter to showrechis.php and...

CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting XSS attacks via a base64 encoded data URI, as demonstrated by the 1 returnUrl parameter to showrechis.php and...

Android Mercury Browser Intent URI Scheme and Directory Traversal Vulnerability

This module exploits an unsafe intent URI scheme and directory traversal found in Android Mercury Browser version 3.2.3. The intent allows the attacker to invoke a private wifi manager activity, which starts a web server for Mercury on port 8888. The webserver also suffers a directory traversal...

CVE-2015-5956: Improper Neutralization of Input During Web Page Generation

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting XSS attacks via a base64 encoded data URI, as demonstrated by the 1 returnUrl parameter to showrechis.php and...

PT-2015-7096

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.5.40 and earlier TYPO3 versions 6.x through 6.2.14 TYPO3 versions 7.x through 7.3.x Description The issue allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting XSS attacks via a base64...