Cross-site Scripting (XSS)

pimcore/pimcore is vulnereable to cross-site scripting XSS attacks. The library does not sanitize the text fields in multiple pop-up dialogs, allowing a malicious user to inject and execute arbitrary Javascript...

Apple iOS 10.3 Fixes Safari Flaw Used in JavaScript-based Ransomware Campaign

If you own an iPhone or iPad, it's possible you could see popup windows in a sort of endless cycle on your Safari browser, revealing your browser has been locked and asking you to pay a fee to unlock it. Just do not pay any ransom. A new ransomware campaign has been found exploiting a flaw in...

Microsoft Internet Explorer 5.0.1 Popup.show Mouse Event Hijacking Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10690/info A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting user into performing unintended...