CVE-2012-3985

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting XSS attacks by leveraging initial-origin access after document.domain has been set...

PT-2012-5119

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 16.0 Firefox ESR versions prior to 10.0.8 Thunderbird versions prior to 16.0 Thunderbird ESR versions prior to 10.0.8 SeaMonkey versions prior to 2.13 Description The issue allows remote attackers to bypass th...

PT-2012-5113

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 16.0 Thunderbird versions prior to 16.0 SeaMonkey versions prior to 2.13 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by leveraging initial-origin access after...

Google Chrome for Android 18.0.1025308之前版本多个安全漏洞

BUGTRAQ ID: 55523 Google Chrome是由Google开发的一款设计简单、高效的Web浏览工具。 Google Chrome for Android 18.0.1025308之前版本存在多个漏洞，攻击者可利用这些漏洞在浏览器上下文中执行任意代码，获取敏感信息、绕过同源策略、窃取Cookie身份验证凭证等其他攻击。 0 Google Chrome for Android 18.0.1025308 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.google.com...

CVE-2012-4908

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

Design/Logic Flaw

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

CVE-2012-4908

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

CVE-2012-4908

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

CVE-2012-4908

CVE-2012-4908 affects Google Chrome for Android, where the Same-Origin Policy for local file access (file:) can be bypassed via symbolic links. The vulnerability enables a remote attacker to access Chrome’s private local files (e.g., cookies, bookmarks) by tricking a loaded file: URL with a symli...

CVE-2012-4908

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

Google Updates Chrome for Android, Fixes Several Vulnerabilities

Google has issued a security update for its Chrome operating system on Android devices, resolving seven medium-risk vulnerabilities and paying out a total of $3,500 in rewards to two researchers. On the Google Chrome Blog, software engineer Jay Civelli wrote that the update strengthens Chrome for...

PT-2012-5654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025308 on Android Description The issue allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink. Recommendations For Google Chrome versions...

CVE-2012-4908: Undefined Security Weakness

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

Google Chrome for Android - Same-origin Policy Bypass Local Symlink

Google Chrome for Android - Same-origin Policy Bypass Local Symlink source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially...

Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting

Google Chrome for Android - com.android.browser.applicationid Intent Extra Data Cross-Site Scripting source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of...

Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting

source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially sensitive information, bypass the same-origin policy, and steal...

Google Chrome for Android - Same-origin Policy Bypass Local Symlink

source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially sensitive information, bypass the same-origin policy, and steal...

Conceptronic Grab'n'Go Authorization Bypass

Exploit for php platform in category web applications Authorization Bypass Vulnerability in Password Reset Function Conceptronic Grab’n’Go Network Storage 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012 Vulnerability...

Sitecom Home Storage Center - Authentication Bypass

Sitecom Home Storage Center - Authentication Bypass Security Advisory AA-006: Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012...

Sitecom Home Storage Center Authorization Bypass

Exploit for php platform in category web applications Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012 Vulnerability Type=...