EUVD-2015-1395

Malware in sbrugna...

EUVD-2007-6488

Malware in sbrugna...

devon.designmode.intelligentgolf.co.uk Cross Site Scripting vulnerability OBB-3883713

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

SUSE CVE-2008-0419

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service crash via images in a page that uses designMode frames, which triggers memory corruption related to resize handles...

WebKit: UXSS via Editor::Command::execute(CVE-2017-2504)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2009-0071

Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a certain a replaceChild or b removeChild call, followed by a 1 queryCommandValue, 2 queryCommandState, or 3...

chromium-browser: Cross-origin bypass in Editing.

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2015-1254

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

Design/Logic Flaw

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2015-1254

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2015-1254

Removed by vendor...

UBUNTU-CVE-2015-1254

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

CVE-2010-2769

CVE-2010-2769 is a cross-site scripting (XSS) vulnerability affecting Mozilla Firefox (before 3.5.12 and 3.6.x before 3.6.9), Thunderbird (before 3.0.7 and 3.1.x before 3.1.3), and SeaMonkey (before 2.0.7). The issue arises when a selection is added to a document with designMode enabled, allowing...

CVE-2010-2769

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in...

Mozilla Firefox 3.0.7 OnbeforeUnLoad DesignMode Dereference Crash

No description provided by source. BODY onload="document.designMode='on';//string alert'Design mode is on!'; document.removeChilddocument.firstChild;//object; document.queryCommandState'BackColor'; alert'Close the Window to see the crash!'; "...

Mozilla Firefox 3.0.7 - OnbeforeUnLoad DesignMode Dereference Crash

milw0rm.com 2009-03-16...

Mozilla Firefox 3.0.7 OnbeforeUnLoad DesignMode Dereference Crash

Exploit for multiple platform in category dos / poc ================================================================= Mozilla Firefox 3.0.7 OnbeforeUnLoad DesignMode Dereference Crash ================================================================= 0day.today 2018-02-15...

Mozilla Firefox 3.0.7 - OnbeforeUnLoad DesignMode Dereference Crash

Mozilla Firefox 3.0.7 - OnbeforeUnLoad DesignMode Dereference Crash milw0rm.com 2009-03-16...

Firefox Browser designMode Null Pointer Dereference DoS Vulnerability - Win

The host is installed with Mozilla Firefox browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxnullptrdosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox Browser designMode Null Pointer Dereference DoS Vulnerability - Win Authors: Chandan S...