LastPass Patches Ormandy Remote Compromise Flaw

LastPass has patched a vulnerability in its Firefox add-on found by Google Project Zero researcher Tavis Ormandy that allows attackers complete remote compromise of the password manager, . The divisive Ormandy submitted a bug report on Tuesday to LastPass after a series of tweets hinting at serio...

chromium-browser: limited same-origin bypass in service workers

The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME...

mojevideo.cz IFRAME Injection vulnerability

Vulnerable URL: http://www.mojevideo.cz/link.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 7646016 VIP website status:| No Check...

CVE-2016-5132

The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME...

CVE-2016-5132: Undefined Security Weakness

The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME...

UBUNTU-CVE-2016-5132

The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME...

jericoacoaraturismo.com.br IFRAME Injection vulnerability

Vulnerable URL: http://www.jericoacoaraturismo.com.br/redir.php?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:44 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank|...

delta-xray.net IFRAME Injection vulnerability

Vulnerable URL: http://www.delta-xray.net/redir.php?URL=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

trangvang.com.vn IFRAME Injection vulnerability

Vulnerable URL: http://www.trangvang.com.vn/site.php?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:34 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 10705612 VIP...

5ye.ca IFRAME Injection vulnerability

Vulnerable URL: http://5ye.ca/go2.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:56 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

therevolution962.com IFRAME Injection vulnerability

Vulnerable URL: http://www.therevolution962.com/goout.php?to=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 3120509 VIP website status:| N...

PT-2016-6256

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to the Service Workers subsystem not properly implementing the Secure Contexts specification. This allows remote attackers to...

CVE-2016-6209

A user supplied GET parameter is used to create the value used as the src value of an iframe displayed on all pages. It allows for CSRF and javascript insertion techniques among others. An attacker could forge a malicious URL that could include javascript execution in the main browser frame...

epressnews.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-166212 Description| Value ---|--- Affected Website:| epressnews.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

todaysart.nl IFRAME Injection vulnerability

Vulnerable URL: http://www.todaysart.nl/2006/linkout.php?l=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 7856939 VIP website status:| N...

Thunderbird Data Compromise

The vulnerability exists in Mozilla Firefox and Thunderbird due to the incorrect implementation of the sandbox attribute for the IFRAME element. Exploiting this vulnerability allows malicious actors to circumvent content restrictions from a single same-origin source, by using a specially crafted...

Firefox Data Compromise

The vulnerability exists in Mozilla Firefox due to the incorrect implementation of the sandbox attribute for the IFRAME element. Exploiting this vulnerability allows malicious actors, operating remotely, to bypass content restrictions from a single same-origin source, by using a specially crafted...

Firefox Bypass Domain Restriction

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of class functions. Exploiting this vulnerability allows malicious actors to circumvent Domain Restrictions Policy SOP rules and gain access to confidential information through the use of IFrame elements...

Mozilla SeaMonkey Bypass Domain Restriction

The Mozilla SeaMonkey browser contains a vulnerability related to errors in the implementation of class functions. Exploiting this vulnerability allows malicious actors to circumvent domain restriction policies SOP and gain access to confidential information through the use of IFRAME elements and...

Internet Explorer Malformed IFRAME Buffer Overflow - ver 2 (CVE-2004-1050)

Internet Explorer IE is a popular web browser developed by Microsoft corporation. A buffer overflow vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is in the way Microsoft Internet Explorer parses certain parameters of an IFRAME tag. An attacker can exploit this...