EUVD-2012-3504

Malware in sbrugna...

CVE-2021-27375: Improper Restriction of Rendered UI Layers or Frames

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

Shopify: H1514 Simple phishing using auto-created modal with weak URL-pattern check in incontext_app_link

Hi, This is unrelated to the Twine-template issue reported earlier as this would still be an issue if the template escape would be fixed. Background The incontextapplink is checked server-side if it's a correct shopifycloud.com-URL. The problem however is that userdata inside the URL is allowed. ...

CVE-2012-3557

CVE-2012-3557 affects Opera prior to 11.65. The issue is improper restriction in reading JSON strings, enabling a crafted site to trigger cross-domain loading of JSON resources and potentially disclose sensitive information. The vulnerability is associated with Opera’s JSON handling; affected pla...

PT-2012-4807

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.65 Description The issue allows remote attackers to perform cross-domain loading of JSON resources and obtain sensitive information via a crafted web site, due to improper restriction of JSON string reading...

CVE-2012-3557: Undefined Security Weakness

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site...