CVE-2018-5326

CVE-2018-5326 affects Cheetah Mobile CM Browser 5.22.06.0012 on older Android platforms, described as a Same Origin Policy bypass . External documents confirm the vulnerability exists in this specific version, enabling cross-origin policy circumvention. The CVSS data provided indicates a network-...

CVE-2018-5327

CVE-2018-5327 affects Cheetah Mobile Armorfly Browser & Downloader (version 1.1.05.0010) on older Android platforms, where a flaw allows bypass of the Same-Origin Policy. The connected CNVD/NVD records describe a security bypass vulnerability enabling cross-origin access, but do not specify exact...

CVE-2018-5327: Undefined Security Weakness

Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5326: Undefined Security Weakness

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

PT-2018-16895

Name of the Vulnerable Software and Affected Versions Cheetah Mobile CM Browser version 5.22.06.0012 Description The issue allows for Same Origin Policy Bypass when Cheetah Mobile CM Browser is installed on older Android platforms. Recommendations For version 5.22.06.0012, consider updating to a...

PT-2018-16896

Name of the Vulnerable Software and Affected Versions Cheetah Mobile Armorfly Browser & Downloader version 1.1.05.0010 Description The issue allows for Same Origin Policy Bypass when the Cheetah Mobile Armorfly Browser & Downloader is installed on older Android platforms. Recommendations For...

CVE-2017-18016

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...

CVE-2017-18016

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...

Design/Logic Flaw

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...

CVE-2017-18016

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...

CVE-2017-18016

Parity Browser 1.6.10 and earlier is vulnerable to a Same Origin Policy bypass via its web proxy engine, which reuses the current site’s token not bound to an origin. An attacker could remotely obtain sensitive information by requesting other sites through the proxy. Affected component: Parity Br...

CVE-2017-18016

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...

PT-2018-6612

Name of the Vulnerable Software and Affected Versions: Parity Browser versions 1.6.10 and earlier Description: The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine. This is possible because...

CVE-2017-18016: Origin Validation Error

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...

Parity Browser < 1.6.10 - Bypass Same Origin Policy Vulnerability

Exploit for multiple platform in category local exploits VuNote ====== Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016 Version: 0.3 Date: Jun 16th, 2017 Tag: parity same origin policy bypass webproxy token reuse Overview -------- Name: parity Vendor: paritytech...

Parity Browser 1.6.10 - Bypass Same Origin Policy

Parity Browser 1.6.10 - Bypass Same Origin Policy VuNote ====== Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016 Version: 0.3 Date: Jun 16th, 2017 Tag: parity same origin policy bypass webproxy token reuse Overview -------- Name: parity Vendor: paritytech References:...

Parity Browser < 1.6.10 - Bypass Same Origin Policy

VuNote ====== Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016 Version: 0.3 Date: Jun 16th, 2017 Tag: parity same origin policy bypass webproxy token reuse Overview -------- Name: parity Vendor: paritytech References: https://parity.io/ 1 Version: 1.6.8 Latest Version...

FreeBSD : mozilla -- Speculative execution side-channel attack (8429711b-76ca-474e-94a0-6b980f1e2d47)

Mozilla Foundation reports : Jann Horn of Google Project Zero Security reported that speculative execution performed by modern CPUs could leak information through a timing side-channel attack. Microsoft Vulnerability Research extended this attack to browser JavaScript engines and demonstrated tha...

Mozilla Firefox Security Advisories (MFSA2018-01, MFSA2018-01) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Advisories (MFSA2018-01, MFSA2018-01) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...