54 matches found
Naver Whale Browser 安全漏洞
Naver Whale Browser is a web browser from the Korean company Naver that supports user-defined interfaces. A security vulnerability previously existed in Naver Whale Browser 3.12.129.18, which stemmed from a default extension in Whale Browser that allowed receiving any SendMessage request from the...
PT-2022-16453 · Unknown · Whale Bridge +1
Name of the Vulnerable Software and Affected Versions: Whale browser versions prior to 3.12.129.18 Description: The issue allows Whale Bridge, a default extension in Whale browser, to receive any SendMessage request from the content script itself. This could lead to controlling Whale Bridge if th...
Mozilla Firefox Security Advisory (MFSA2013-26) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Mozilla Firefox < 63.0
The version of Firefox installed on the remote Windows host is prior to 63.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-26 advisory. - When manipulating user events in nested loops while opening a document through script, it is possible to trigger a...
Fedora 27 : mozilla-noscript (2018-09c51bbcec)
Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...
Grammarly: Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's origin
Summary: Attacker could trigger Grammarly extension's gnar.fetch command using a crafted page to perform XHR with cookies and any configurational params to any cross-origin resource. Description: Page could Init Grammarly popup editor no user gesture, helper Events have isTrusted property, which...
Grammarly: `open-url` command allows opening unlimited number of tabs pointing to arbitrary URLs
Summary Attacker could trigger Grammarly extension's open-url command to open any number of tabs pointing to any origin including internal, e.g. chrome:// and cause "infinite Chrome DoS" if attacker's page is pinned. Description Page could Init Grammarly popup editor no user gesture, helper Event...
Reading Your Emails With A Read&Write Chrome Extension Same Origin Policy Bypass (~8 Million Users Affected)
Summary Due to a lack of proper origin checks in the message passing from regular web pages, any arbitrary web page is able to call privileged background page APIs for the Read&Write Chrome extension vulnerable version 1.8.0.139. Many of these APIs allow for dangerous actions which are not meant ...
FS Expedia Clone SQL Injection Vulnerability
FS Expedia Clone is an online travel reservation management system based on PHP and MySQL. The system supports booking of airline tickets, hotel reservations and car rentals via the Internet or telephone agents. A SQL injection vulnerability exists in FS Expedia Clone version 1.0. A remote attack...
LastPass websiteConnector.js content script allows proxying internal RPC commands
noticed this entry in the contentscript array from the LastPass manifest: "matches": "https://1min-ui-prod.service.lastpass.com/" , "js": "1minsignup/chrome/websiteConnector.js" , "allframes": true, "runat": "documentend" , That's a content script that is only used for one specific lastpass.com...
Use-after-free in HTML Editor — Mozilla
VUPEN Security, via TippingPoint's Zero Day Initiative, reported a use-after-free within the HTML editor when content script is run by the document.execCommand function while internal editor operations are occurring. This could allow for arbitrary code execution...
Use-after-free in nsImageLoadingContent — Mozilla
Security researcher Nils reported a use-after-free in nsImageLoadingContent when content script is executed. This could allow for arbitrary code execution...
CVE-2009-3195
CVE-2009-3195 affects JCE-Tech Auction RSS Content Script 3.0 with multiple XSS vulnerabilities that allow remote injection of arbitrary script/HTML via the id parameter to rss.php and search.php. The description specifies client-side impact (arbitrary script injection) but does not provide in-do...
Auction RSS Content Script - search.php?id Cross-Site Scripting
Auction RSS Content Script - search.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/44267/info JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverag...