The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure.

The vulnerability of the nsUnicodeToUTF8::GetMaxLength function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser on the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the content of web pages by using the “open window” button on the website...

chromium-browser: Cross-origin bypass in V8

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a 1 observe or 2 getNotifier call...

CVE-2015-6938

Cross-site scripting XSS vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site reque...

PYSEC-2015-24

Cross-site scripting XSS vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site reque...

Aol account hijack sessions 0day

hijacking sessions replaying information, to gain access to other account details. Usage Info you will need firefox live http headers FIXED for replay and the method below. This is private exploit. You can buy it at https://0day.today...

The vulnerability of Safari browser and iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

The vulnerability of Firefox and Firefox ESR browsers allows attackers to circumvent access control policies.

The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access control policies using the JSON.parse method...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the StyleAnimationValue class StyleAnimationValue::operator in Firefox browsers, Firefox ESR, and the Firefox OS operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrit...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05212)

Microsoft Internet Explorer is a popular WEB browser. A remote code execution vulnerability exists when Internet Explorer fails to properly access objects in memory. The vulnerability allows an attacker to execute arbitrary code memory corruption in the context of the current user...

Remote HTML tag injection in Gaia System app — Mozilla

Security researcher Muneaki Nishimura reported an issue with Gaia's System app which allows an attacker to inject HTML code into the System app's context via specially-crafted search links. The injection occurs when the user opens such malicious link in the browser and then presses the HOME butto...

Remote HTML tag injection in Gaia Search app — Mozilla

Security researcher Muneaki Nishimura reported an issue with Gaia's Search app which allows an attacker to inject HTML code into the System app's context via specially-crafted search links. The injection occurs when the user opens such malicious link in the browser and then re-opens the browser o...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2015-03353)

Blink is a browser typography engine developed by Google and Opera Software. Blink suffers from a same-origin policy bypass vulnerability. Allows remote attackers to bypass the same-origin policy by exploiting the availability of editors...

New Logjam Attack on Diffie-Hellman Threatens Security of Browsers, VPNs

Researchers have uncovered a flaw in the way that some servers handle the Diffie-Hellman key exchange, a bug that’s somewhat similar to the FREAK attack and threatens the security of many Web and mail servers. The bug affects all of the major browsers and any server that supports export-grade...

The vulnerability of Google Chrome browser allows a malicious intruder to trigger a service denial or otherwise affect the system.

The vulnerability of the Skia component in Google Chrome browsers can allow remote attackers to cause service interruptions out-of-bounds exploits or otherwise affect the system...

Google Chrome Information Disclosure Vulnerability (CNVD-2015-02650)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the browser/ui/websitesettings/websitesettings.cc file in versions of Google Chrome prior to 42.0.2311.90, which stems from a failure to display the following in the Permissions tabl...

AwSnap: let full-version-Windows, iOS, Android Chrome browser crash interesting vulnerability-vulnerability warning-the black bar safety net

A few weeks ago, we reported the 1 3 characters of the result in Chrome crash vulnerability. However, this vulnerability have a little regret, that is, it is only in the MAC OS X entry into force, the other system is not affected. Now, we have one of the more interesting vulnerabilities. Hackers...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-01650)

Microsoft Internet Explorer is a popular WEB browser. An unspecified memory corruption vulnerability exists in Microsoft Internet Explorer that could allow an attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or execute arbitrary code...

Mozilla Firefox/Thunderbird/SeaMonkey Proxy Authentication Session Fixation Vulnerability

Firefox/Thunderbird/SeaMonkey are web browsers and mail/newsgroup clients released by Mozilla. A session fixation vulnerability exists in Mozilla Firefox/Thunderbird/SeaMonkey, which can be exploited by an attacker to hijack arbitrary sessions and gain unauthorized access to affected applications...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00077)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A denial of service vulnerability exists in versions of Google Chrome prior to 11.0.696.65, which allows remote attackers to launch a denial of service attack via SVG documents...