Code injection

Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code, in conjunction with a delay in notifying the user of an attempted spoof...

CVE-2013-2915

Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL...

Code injection

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code...

CVE-2013-2908

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code...

CVE-2013-2916

Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code, in conjunction with a delay in notifying the user of an attempted spoof...

CVE-2013-2908

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code...

CVE-2013-2915

Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL...

CVE-2013-2916

Removed by vendor...

FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)

Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 50 security fixes in this release, including: 223962270758271161284785284786 Medium CVE-2013-2906: Races in Web Audio. Credit to Atte Kettunen of OUSPG. 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. 265221 Medi...

PHP168 explosion vulnerability, you can query any user data-bug warning-the black bar safety net

PHP168 program built-in“user”module contains the user profile display page. In many practical scenarios, this page is not the front Desk use, but can be directly through the URL access. Page routing is:/homepage.php/username/member-profile To PHP168 official demo site, for example, to view any us...

Tipask 2.0 front arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net

Brief description: tipask you can adjust the picture save and delete the original avatar Delete the original avatar used when a post submission parameters Result in arbitrary file deletion vulnerability Detailed description: function onsaveimg $x1 = $this- post'x1' ; $y1 = $this- post'y1' ; $x2 =...

ShopEx an interface defect can traverse all the users of the site-vulnerability warning-the black bar safety net

Brief description: ShopEx an interface defect,can traverse all sites Detailed description: The problem occurs in shopex net shop using the wizard page http://guide.ecos.shopex.cn/step2.php?refer=eyJjZXJ0aV9pZCI6MTA1MSwiY2FsbGJhY2tfdXJsIjoiaHR0cDpcL1wvd3d3LmVrYWlkaWFuLmNvbVwvIn0= refer base64...

Code injection

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site...

CVE-2013-5152

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site...

CVE-2013-5152

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site...

Millet mobile phone the album encrypted can bypass the access-vulnerability warning-the black bar safety net

Brief description: Album encrypted can bypass the access Detailed description: Use the phone comes with encryption album encrypted by the system comes with the album view mode can be a normal display require a password for access, but through the micro-channel, QQ, etc. program called photo...

Easy to think espcms background feature bypass[direct access backend to sql injection]-vulnerability warning-the black bar safety net

Brief description: Back-office functions to bypass, the background presencesql injection Combination bypass vulnerabilitiessql injection Detailed description: A local test using the default adminsoft for background directory, use the class constructor to verify the user's backstage access...

B2Bbuilder website SQL injection vulnerability that can be drag library-vulnerability warning-the black bar safety net

Brief description: B2Bbuilder official websiteSQL injectionvulnerabilities that can be drag library There is also the message path. Detailed description: The presence of the injected url: http://www.b2b-builder.com/announcement.php?id=30 Reported an absolute path vulnerability: ! The official...

Dreammail V4. 6. 9. 2 XSS exploit-vulnerability warning-the black bar safety net

For version: DreamMail 4.6.9.2 Test environment: windows xp sp3 python version: 2.6 Test email: 126.com ! Copy code -- coding:UTF-8 -- @small five righteousness http://www.cnblogs.com/xiaowuyi import smtplib, urllib2 payload = "'"' def sendMailtoemail, smtpsrv, username, password: msg = "From:...