14210 matches found
The vulnerability of the iOS operating system and the Safari browser allows attackers to compromise the confidentiality of information.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of information through a specially crafted website...
The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain confidential information or circumvent existing access control policies.
The vulnerability of the WebKit JavaScript Bindings component in the iOS operating system and Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or obtain confidential information throug...
The vulnerability of the iOS operating system and the Safari browser allows a hacker to replace the URL string.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to substitute the URL string with a specially crafted web page from a remote location...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
Vulnerability of the iOS operating system and the Safari browser, allowing a hacker to execute arbitrary code
The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
RHEL 6 : chromium-browser (RHSA-2017:0860)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:0860 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 57.0.2987.133. Security Fixes:...
The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or obtain confidential information.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or cause a service failure memory...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of the iOS operating system, the Safari browser, and the iTunes media player allows attackers to obtain confidential information or circumvent existing access restrictions policies.
The vulnerability of the WebKit component of the iOS operating system, Safari browser, and iTunes media player exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions or obtain confidential information...
Apple WebKit - Document::adoptNode Use-After-Free Exploit
Exploit for multiple platform in category dos / poc var s = document.body.appendChilddocument.createElement'script'; s.type = '0'; s.textContent = 'document.body.appendChildparent.i0'; var i0 = s.appendChilddocument.createElement'iframe'; s.type = ''; var f =...
Apple WebKit - JSC::B3::Procedure::resetReachability Use-After-Free Exploit
Exploit for multiple platform in category dos / poc function for var i = 0; i 1000000; ++i const v = Array & 1 ? v : 1; typeof o = 'object'; ; !-- Asan Log: ================================================================= ==32191==ERROR: AddressSanitizer: heap-use-after-free on address...
Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting Expl
Exploit for multiple platform in category web applications URL scriptURL; URL url; if protocolIsJavaScripturlString scriptURL = completeURLurlString; // completeURL encodes the URL. url = blankURL; else url = completeURLurlString; if shouldConvertInvalidURLsToBlank && !url.isValid url = blankURL;...
Apple WebKit - JSC::SymbolTableEntry::isWatchable Heap Buffer Overflow Exploit
Exploit for multiple platform in category dos / poc function x = 0 var a; function arguments function b var g = 1; a5; f; g; ; , unsigned int, unsigned int webkit/WebKitBuild/Release/JavaScriptCore.framework/Versions/A/JavaScriptCore+...
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting Exploit
Exploit for multiple platform in category web applications child = mfirstChild removeBetweennullptr, child-nextSibling, child; notifyChildNodeRemovedthis, child; If the location hash value is set, the page will give focus to the associated element. However, if there is a stylesheet that has not...
Apple WebKit Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting
Apple WebKit Safari 10.0.3 12602.4.8 - Synchronous Page Load Universal Cross-Site Scripting URL scriptURL; URL url; if protocolIsJavaScripturlString scriptURL = completeURLurlString; // completeURL encodes the URL. url = blankURL; else url = completeURLurlString; if shouldConvertInvalidURLsToBlan...
Apple WebKit Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Link Element
Apple WebKit Safari 10.0.3 12602.4.8 - Universal Cross-Site Scripting via a Focus Event and a Link Element child = mfirstChild removeBetweennullptr, child-nextSibling, child; notifyChildNodeRemovedthis, child; If the location hash value is set, the page will give focus to the associated element...
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Link Element
child = mfirstChild removeBetweennullptr, child-nextSibling, child; notifyChildNodeRemovedthis, child; If the location hash value is set, the page will give focus to the associated element. However, if there is a stylesheet that has not been loaded yet, the focusing will be delayed until the...
Apple WebKit - 'Document::adoptNode' Use-After-Free
var s = document.body.appendChilddocument.createElement'script'; s.type = '0'; s.textContent = 'document.body.appendChildparent.i0'; var i0 = s.appendChilddocument.createElement'iframe'; s.type = ''; var f = document.body.appendChilddocument.createElement'iframe'; f.contentDocument.adoptNodei0;...