26 matches found
EUVD-2014-5209
Malware in sbrugna...
EUVD-2012-3961
Malware in sbrugna...
EUVD-2013-2252
Malware in sbrugna...
CVE-2013-2306
The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...
CVE-2014-5318
The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...
Code injection
The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...
CVE-2014-5318
The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...
CVE-2014-5318: Undefined Security Weakness
The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...
PT-2014-6402
Name of the Vulnerable Software and Affected Versions jigbrowser+ versions 1.8.1 and earlier Description The issue allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. Recommendations For jigbrowser+ versions 1.8.1 and earlier, at the moment, there is no informati...
jigbrowser+ for iOS same origin policy bypass
Overview jigbrowser+ for iOS contains a flaw in loading web pages, which may allow an attacker to bypass the same origin policy. Toshiharu Sugiyama of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
JVN#80531230: jigbrowser+ for iOS same origin policy bypass
jigbrowser+ for iOS contains a flaw in loading web pages, which may allow an attacker to bypass the same origin policy. Impact By using JavaScript, an attacker may obtain sensitive data from a different domain in violation of the same origin policy. Solution Update the Software Update to the late...
Chrome for Android Update Patches URL Spoofing Bug
The latest update to Chrome on Android – pushed yesterday – fixes two bugs, including a critical flaw in the browser that could have let an attacker trick a user into visiting a malicious site. The problem, marked high priority by Google, was discovered by Japanese app developer Keita Haga. The...
CVE-2013-2306
The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...
Open redirect
The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...
CVE-2013-2306
The CVE-2013-2306 vulnerability affects jigbrowser+ for Android prior to version 1.6.4. The issue arises when opening a new window, which allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like deception by forging the displayed URL. Public references consi...
jigbrowser+ for Android vulnerable to address bar spoofing
Overview jigbrowser+ for Android contains an issue when opening a new window, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Th...
CVE-2013-2306: Undefined Security Weakness
The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site...
PT-2013-3650
Name of the Vulnerable Software and Affected Versions jigbrowser+ versions prior to 1.6.4 Description The issue allows remote attackers to spoof the address bar via a crafted web site due to improper window opening. Recommendations For versions prior to 1.6.4, update to version 1.6.4 or later to...
JVN#01313594: jigbrowser+ for Android vulnerable to address bar spoofing
jigbrowser+ for Android contains an issue when opening a new window, which may result in the address bar being spoofed. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update the software Update to the latest version...