Google Chrome Extensions URL Spoofing Vulnerability

Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 68.0.3440.75. The vulnerability can be exploited by remote attackers to forge a UIL with the help of a specially...

Google Chrome URL Spoofing Vulnerability (CNVD-2018-17054)

Google Chrome is a web browser developed by the American company Google Google. A URL spoofing vulnerability exists in Omnibox in Google Chrome. A remote attacker can exploit this vulnerability to spoof URLs by tricking users into visiting specially crafted websites...

Google Chrome URL Spoofing Vulnerability (CNVD-2018-17047)

Google Chrome is a web browser developed by the American company Google Google. A URL spoofing vulnerability exists in Google Chrome for iOS. A remote attacker can exploit this vulnerability to spoof URLs by tricking users into visiting specially crafted websites...

Apache Spark Cross-Site Scripting Vulnerability (CNVD-2018-15536)

Apache Spark is a large-scale data processing engine that supports acyclic data streams and in-memory computing from the Apache Software Foundation. A cross-site scripting vulnerability exists in the UI of Apache Spark versions 1.0.0 through 2.1.2, 2.2.0 through 2.2.1, and 2.3.0. A remote attacke...

node-simple-router directory traversal vulnerability

node-simple-router is a simple router for Node. A directory traversal vulnerability exists in node-simple-router. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

Sencisho Directory Traversal Vulnerability

Sencisho is an http server for local development. A directory traversal vulnerability exists in Sencisho. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serverhuwenhui Directory Traversal Vulnerability

serverhuwenhui is an http server. A directory traversal vulnerability exists in serverhuwenhui. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

cyberjs directory traversal vulnerability

cyberjs is a JavaScript library for cyber. A directory traversal vulnerability exists in cyberjs. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

List-n-stream Directory Traversal Vulnerability

list-n-stream is a video list module. A directory traversal vulnerability exists in list-n-stream version 0.0.10 and earlier. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Pooledwebsocket Directory Traversal Vulnerability

pooledwebsocket is a software package. A directory traversal vulnerability exists in pooledwebsocket. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

gaoxiaotingtingting directory traversal vulnerability

The Node.js module gaoxiaotingtingting is an HTTP server. A directory traversal vulnerability exists in gaoxiaotingtingting. An attacker can exploit this vulnerability by placing ". /" in a url to access the file system...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2018-12400)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox versions prior to 59, where the program fails to properly validate user-submitted input. The vulnerability can be exploited by a...

nodeaaaaa Directory Traversal Vulnerability

nodeaaaaa is a static file server. A directory traversal vulnerability exists in nodeaaaaa. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

wffserve Path Traversal Vulnerability

wffserve is a file server. A directory traversal vulnerability exists in wffserve. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

cuciuci directory traversal vulnerability hole

cuciuci is a file server. A directory traversal vulnerability exists in cuciuci. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

node-server-forfront path traversal vulnerability

node-server-forfront is a static file server. A path traversal vulnerability exists in node-server-forfront. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

jikes path traversal vulnerability

jikes is a file server. A directory traversal vulnerability exists in jikes. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence into a URL to gain access to the file system...

DEBIAN-CVE-2018-5117

If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different sit...

CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

DEBIAN-CVE-2017-7749

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...