CVE-2025-10290

The Mozilla Focus for iOS browser is vulnerable to a spoofing vulnerability in its address bar component . When a user opens a link via the contextual menu using certain URL schemes, the page may fail to load, but the toolbar fails to refresh correctly. This allows an attacker to spoof websites i...

Mail.ru: XSS через подгрузку ссылки.

Доброго времени суток. Я нашел новую xss в https://connect.mail.ru/ POC: 1. Переходим на неизвестную ветку википедии, например эту https://io.wikipedia.org/wiki/Nenufaro 2. Вставляем туда скрипт " F232448 3. Подгружаем страничку википедии через наш сервис...

CVE-2011-3084

Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page...