CVE-2014-4363

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via 1 an http web site, 2 an https web site with an unacceptable X.509 certificate, or 3 an IFRAME element...

CVE-2014-4363

CVE-2014-4363 affects Safari/WebKit in iOS prior to iOS 8. The root issue is improper restriction of password autofill in forms, enabling an attacker to obtain user credentials via (1) an HTTP site, (2) an HTTPS site with an invalid/broken certificate, or (3) an iframe. Public writeups describe t...

Minimo password manager information leak

Crossite scripting in combination with form autofilling feature may cause password to be transmitted to different site...