Cross site scripting

Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting XSS vulnerability via the drag & drop functionality in message boxes...

CVE-2020-8292

Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting XSS vulnerability via the drag & drop functionality in message boxes...

Rocket.Chat 跨站脚本漏洞

Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in Rocket.Chat server versions prior to 3.9.0, which stems from the drag-and-drop functionality being susceptible to XSS attacks. No details of the vulnerability are available at this time...

CVE-2020-8292

Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting XSS vulnerability via the drag & drop functionality in message boxes...

Sandbox Restrictions Bypass

chromium is vulnerable to sandbox restrictions bypass. A use-after-free in drag and drop allows a remote attacker who has compromised the renderer process to perform a sandbox escape via a malicious HTML page...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0048-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0041-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

UBUNTU-CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21107

CVE-2021-21107 is a Use-After-Free in the Chromium drag-and-drop path affecting Google Chrome/Chromium on Linux prior to 87.0.4280.141. The vulnerability could allow a remote attacker who compromises the renderer process to escape the sandbox via a crafted HTML page. Public advisories (Arch Linux...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in "Drag and Drop" in Google Chrome prior to version 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome memory misreference vulnerability (CNVD-2021-04420)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in "Drag and Drop" in Google Chrome prior to version 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Drag and then drop files between a Citrix session and a local endpoint

Citrix now supports Dragging and then dropping files between a Citrix session and a local endpoint. You can drag and then drop files, groups of files, directories, groups of directories, or a combination of files and directories to and from the same client on the session. This ability applies to ...

Fedora 32 : webkit2gtk3 (2020-e8a7566e80)

Update to WebKitGTK 2.30.3 : - Fix backdrop filters with rounded borders. - Fix scrolling iframes when async scrolling is enabled. - Allow applications to handle drag and drop on the web view again. - Update Outlook user agent quirk. - Fix several crashes and rendering issues. - Security fixes:...

drag-racing.org Cross Site Scripting vulnerability OBB-1461920

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists as an image that has not loaded correctly could be dragged and dropped cross-domain, resulting in a cross-origin information leak...

Denial Of Service (DoS)

firefox:bionic is vulnerable to denial of service DoS. If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https...