Google Chrome Omnibox URL Spoofing Vulnerability (CNVD-2018-24374)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in iOS-based versions of Google Chrome prior to 70.0.3538.67, which stems from the program's failure to properly handle browsing history. A remote attacker...

Google Chrome V8 Memory Misreference Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A memory misreference vulnerability exists in V8 in versions of Google Chrome prior to 70.0.3538.67. A remote attacker can exploit this vulnerability to damage objects...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2018-20076)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in Catalog Service in Google Chrome versions prior to 64.0.3282.119, which stems from a failure to fully enforce policy, and can be exploited by a remote attacker to ru...

Path Traversal in html-pages

Versions of html-pages before 2.1.0 are vulnerable to path traversal. Recommendation Update to version 2.1.0 or later...

GHSA-FM87-46VV-JQRR Path Traversal in html-pages

Versions of html-pages before 2.1.0 are vulnerable to path traversal. Recommendation Update to version 2.1.0 or later...

Google Chrome Memory Misreference Vulnerability (CNVD-2019-03620)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in ResourceCoordinator in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit this vulnerability to corrupt the heap with the help of specially...

Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-03614)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A buffer overflow vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. The vulnerability can be...

CVE-2018-2434

A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end user: UI add-on for SAP NetWeaver UIInfra, 1.0, SAP UI Implementation for Decoupled Innovations UI700, 2.0: SAP NetWeaver 7.00 Implementation,...

html-pages node module path traversal vulnerability

html-pages is a module that allows you to browse catalogs in your browser and provide static files. A path traversal vulnerability exists in the html-pages node module. An attacker can exploit this vulnerability to read arbitrary files from the server using cURL...

CVE-2018-3744

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL...

CVE-2018-3744

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL...

Path traversal

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL...

CVE-2018-3744

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL...

CVE-2018-3744

The vulnerability CVE-2018-3744 affects the html-pages Node.js module, with versions prior to 2.1.0 susceptible to a directory/path traversal vulnerability that allows an attacker to read arbitrary files on the server (e.g., via crafted URLs or curl requests). Public reports and advisories (GHSA-...

PT-2018-16166 · Node · Html-Pages

Name of the Vulnerable Software and Affected Versions: html-pages versions prior to 2.1.0 Description: The issue allows an attacker to read any file from the server, potentially using tools like cURL. This is due to a path traversal vulnerability in the html-pages node module. Recommendations:...

Path Traversal

Overview Versions of html-pages before 2.1.0 are vulnerable to path traversal. Recommendation Update to version 2.1.0 or later. References - HackerOne Report - GitHub Advisory...

Node.js third-party modules: [html-pages] Stored XSS in the filename when directories listing

I would like to report a Store XSS vulnerability in html-pages It allows executing malicious javascript code in the user's browser. Module module name: html-pages version: 2.1.1 npm page: https://www.npmjs.com/package/html-pages Module Description Simple development http server for file serving a...

Node.js third-party modules: [html-pages] Path Traversal in html-pages module allows to read any file from the server with curl

Hi, This report is about Directory Traversal vulnerability I found in html-pages module. Module: html-pages is a module which allows to browse directories and serve static files in the browser. The vulnerability exists in the latest available version 2.0.7 Link to npm page:...

CoffeeMiner - Collaborative (MITM) Cryptocurrency Mining Pool In Wifi Networks

Collaborative mitm cryptocurrency mining pool in wifi networks Warning: this project is for academic/research purposes only. A blog post about this project can be read here: http://arnaucode.com/blog/coffeeminer-hacking-wifi-cryptocurrency-miner.html Concept Performs a MITM attack to all selected...

Google Chrome memory misreference vulnerability (CNVD-2017-33589)

Google Chrome for Windows is a Windows-based Web browser developed by Google.PPAPI Plugins is one of the plugins for displaying Flash animations. A memory misreference vulnerability exists in the PPAPI Plugin in Google Chrome for Windows, which stems from the program failing to adequately validat...