Design/Logic Flaw

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6041

Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6050

CVE-2018-6050: In Google Chrome, the Omnibox (URL bar) UI could be spoofed via a crafted HTML page, allowing a remote attacker to misrepresent the target URL. This affects Chrome versions prior to 64.0.3282.119. Root cause is a security UI weakness in Omnibox handling that permits spoofed content...

Apple iOS Status Bar Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and the Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in versions of Apple iOS prior to 12. An attacker in close physical proximity could use the vulnerability to...

Apple iOS SafariViewController Address Bar Spoofing Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and SafariViewController is one of the web browser components. A security vulnerability exists in the SafariViewController component in versions of Apple iOS prior to 12. The vulnerability can be exploited by an attacker to...

Pakistani hacker reports address bar spoofing flaws in Edge & Safari browser

By Waqas Rafay Baloch has reported Vulnerability in Edge and Safari Browsers that Allows Address Bar Exploitation. Nowadays the phishing attacks have become increasingly sophisticated and difficult to detect so it is indeed appreciable that security researchers are managing to spot such campaigns...

Apple Yet to Patch Safari Browser Address Bar Spoofing Flaw

A browser address bar spoofing flaw was found by researchers this week in Safari – and Apple has yet issue a patch for the flaw. Researcher Rafay Baloch on Monday disclosed two proof-of-concepts revealing how vulnerabilities in Edge browser 42.17134.1.0 and Safari iOS 11.3.1 could be abused to...

Mozilla Firefox for Android Spoofing Vulnerability

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 62 for Android. The vulnerability can be exploited by remote attackers to spoof the contents of the...

HTML5 Video Player 1.2.5 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: HTML5 Video Player 1.2.5 - Denial of Service PoC Exploit Author: T3jv1l Vendor Homepage: http://www.html5videoplayer.net/download.html Software: http://www.html5videoplayer.net/html5videoplayer-setup.exe Contact:...

chromium-browser: URL spoof in full screen mode

A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

chromium-browser: URL spoof in permission dialogs

A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

survey.barharbormaine.gov Improper Access Control vulnerability

Open Bug Bounty ID: OBB-673100 Description| Value ---|--- Affected Website:| survey.barharbormaine.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

UBUNTU-CVE-2017-15427

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

CVE-2017-15420

CVE-2017-15420 describes a URL spoofing issue in Google Chrome/Chromium’s Omnibox caused by incorrect handling of back navigations on error pages, allowing a crafted HTML page to spoof the URL bar. Affected products/versions: Chrome prior to 63.0.3239.84 (per the CVE description). Remediation: up...

CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Denial of Service in PAN-OS Management Web Interface

A Denial of Service exists in PAN-OS Management Web Interface that allows an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page. Ref PAN-100189, CVE-2018-10140 This vulnerability can be triggered by an authenticated user...

CVE-2018-12587

A cross-site scripting XSS vulnerability was found in valeuraddons German Spelling Dictionary v1.3 an Opera Browser add-on. Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM® SDK for Node.js™ (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM SDK for Node.js Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Rational Business Developer (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" Attach for SSL/TLS affects IBM Rational Business Developer. Vulnerability Details CVE-ID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could...

Security Bulletin: Multiple vulnerabilities in the IBM Java SDK affects Rational Developer for i, Rational Developer for AIX and Linux and Rational Developer for Power Systems Software

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Versions 6 and 7 that is used by IBM Rational Application Developer for WebSphere Software CVE-2015-0488, CVE-2015-0478, CVE-2015-2808, CVE-2015-1916, CVE-2015-0204. These issues were disclosed as part of the IBM Java...