15 matches found
Google Chrome resource management error vulnerability
Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in iOS Web, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...
Malicious code in debugger-for-ios-web (npm)
The package debugger-for-ios-web was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-13777
An insufficient validation of untrusted input flaw was found in the iOSWeb component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513128566...
EUVD-2024-21130
Malicious code in bioql PyPI...
Malicious code in debugger-for-ios-web (npm)
The package debugger-for-ios-web was found to contain malicious code...
CVE-2020-16046
Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page...
SUSE CVE-2020-6558
Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2016-1707: Improper Input Validation
ios/web/webstate/ui/crwwebcontroller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site...
Photos in Wifi 1.0.1 iOS - Arbitrary File Upload
Photos in Wifi 1.0.1 iOS - Arbitrary File Upload Document Title: =============== Photos in Wifi v1.0.1 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2015-09-28 Vulnerability...
Air Drive Plus 2.4 - Arbitrary File Upload
Air Drive Plus 2.4 - Arbitrary File Upload Document Title: =============== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1597 Release Date: ============= 2015-09-21 Vulnerability Laboratory ...
vPhoto-Album v4.2 iOS - File Upload Web Vulnerability
Document Title: =============== vPhoto-Album v4.2 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 1477...
iWifi for Chat v1.1 iOS - Denial of Service Vulnerability
Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
jDisk (stickto) v2.0.3 iOS - Multiple Web Vulnerabilities
Document Title: =============== jDisk stickto v2.0.3 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1196 Release Date: ============= 2014-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 11...
CVE-2005-3921: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Cisco IOS Web Server for IOS 12.02a allows remote attackers to inject arbitrary web script or HTML by 1 packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI...
CVE-1999-1175
Web Cache Control Protocol WCCP in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048...