CVE-2015-1275

Google Chrome before 44.0.2403.89 on Android is vulnerable to UXSS via a crafted intent: URL, enabling remote attackers to inject arbitrary script or HTML (trailing alert(document.cookie);// substring) through UrlUtilities.java. This is CVE-2015-1275. OpenSUSE/GLSA and related advisories show the...

Google Patches 43 Bugs in Chrome

A new version of Google Chrome is available, and it contains patches for 43 security vulnerabilities, many of them in the high-risk category. Two of the more serious vulnerabilities fixed in Chrome 44 are a pair of universal cross-site scripting bugs. One of the flaws is in blink, the Web layout...

Exponent CMS 2.3.1 - Multiple XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Multiple Exponent CMS Cross-Site Scripting Vulnerabilies Discovered by- Mayuresh Dani email protected Narendra Shinde email protected Vendor Homepage: http://www.exponentcms.org/ Software Link:...

Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple Exponent CMS Cross-Site Scripting Vulnerabilies Discovered by- Mayuresh Dani [email protected] Narendra Shinde [email protected] Vendor Homepage: http://www.exponentcms.org/ Software Link: http://sourceforge.net/projects/exponentcms/files/exponent-2.3.1.zip/download Versio...

Exponent CMS 2.3.1 Cross Site Scripting

Exploit Title: Multiple Exponent CMS Cross-Site Scripting Vulnerabilies Discovered by- Mayuresh Dani [email protected] Narendra Shinde [email protected] Vendor Homepage: http://www.exponentcms.org/ Software Link: http://sourceforge.net/projects/exponentcms/files/exponent-2.3.1.zip/download Versio...

Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities

Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: Multiple Exponent CMS Cross-Site Scripting Vulnerabilies Discovered by- Mayuresh Dani [email protected] Narendra Shinde [email protected] Vendor Homepage: http://www.exponentcms.org/ Software Link:...

Microsoft Internet Explorer Universal XSS Proof Of Concept

Cookie hijacking: Internet Explorer UXSS CVE-2015-0072 Host below files on webserver attacker.com and share the exploit link with victims, exploit.php --- exploit link Share with victim redirect.php --- Script to redirect on target page target page should not contain X-Frame-Options or it will fa...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a...

CVE-2015-0072

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a...

CVE-2015-0072

CVE-2015-0072 describes a Universal XSS (UXSS) in Internet Explorer 9–11, allowing remote injection of script by abusing IFRAME-based redirects and WindowProxy eval to bypass Same Origin Policy. The vulnerability affects Microsoft Internet Explorer versions 6–11 and can lead to arbitrary code exe...

CVE-2014-0562

Cross-site scripting XSS vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

CVE-2014-0562

Cross-site scripting XSS vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

CVE-2014-0562

Adobe Reader/Acrobat for macOS is affected by a Cross-site scripting (UXSS) vulnerability (CVE-2014-0562) in versions 10.x prior to 10.1.12 and 11.x prior to 11.0.09. Exploitation could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Publicly documented in N...

CVE-2014-1747

Cross-site scripting XSS vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS UXSS."...

CVE-2014-1747

Cross-site scripting XSS vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS UXSS."...

CVE-2014-1747

Removed by vendor...

CVE-2014-1747

CVE-2014-1747 is a UXSS-type XSS in Blink's DocumentLoader::maybeCreateArchive used by Google Chrome prior to 35.0.1916.114. The vulnerability allows remote attackers to inject arbitrary script/HTML via crafted MHTML content. Affected component is Blink/WebKit's MHTML handling in Chrome versions ...

CVE-2014-1716

Cross-site scripting XSS vulnerability in the RuntimeSetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

CVE-2014-1716

Cross-site scripting XSS vulnerability in the RuntimeSetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...