CVE-2012-2899

Removed by vendor...

PT-2014-2257

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.82 on iOS Description The issue allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks. This is achieved through certain incorrect calls to WebView methods that...

Apple Safari webarchive File Format UXSS

A UXSS stack vulnerability has been reported in the Apple Safari webarchive File Format...

Mac OS X Safari .webarchive File Format UXSS

Generates a .webarchive file for Mac OS X Safari that will attempt to inject cross-domain Javascript UXSS, silently install a browser extension, collect user information, steal the cookie database, and steal arbitrary local files. When opened on the target machine the webarchive file must not hav...

Chrome for Android - UXSS via com.android.browser.application_id Intent extra

CVE Number: CVE-2012-4905 Title: Chrome for Android - UXSS via com.android.browser.applicationid Intent extra Affected Software: Confirmed on Chrome for Android v18.0.1025123 Credit: Takeshi Terada Issue Status: v18.0.1025308 was released which fixes this vulnerability Overview: By sending a...

Chrome For Android Universal Cross Site Scripting

CVE Number: CVE-2012-4905 Title: Chrome for Android - UXSS via com.android.browser.applicationid Intent extra Affected Software: Confirmed on Chrome for Android v18.0.1025123 Credit: Takeshi Terada Issue Status: v18.0.1025308 was released which fixes this vulnerability Overview: By sending a...

Opera 12.02 Cross Site Scripting

Exploit Title: Opera image/svg+xml UXSS Date: 06.10.2012 Exploit Author: volema.com Author homepage: http://blog.volema.com Vendor Homepage: opera.com Version: Opera 12.02 Tested on: Windows CVE : NO Full disclosure - http://blog.volema.com/opera-svg-xml-shortcut-uxss.html We'll exploit the proce...

Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards

Google has released Chrome 22, a major new version of its browser that includes a huge number of security fixes, many of them high-priority vulnerabilities. The company also handed out nearly $30,000 in rewards to security researchers, more than half of it to Sergey Glazunov, who discovered two...

CVE-2012-2889

Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...

Cross site scripting

Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...

CVE-2012-2886

Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...

CVE-2012-2886

CVE-2012-2886 corresponds to a UXSS (Universal XSS) vulnerability in Chromium/Google Chrome reported as affecting Chrome before 22.0.1229.79, where an attacker could inject arbitrary script via the Google V8 bindings. The connected advisories show that Chromium/OpenSUSE patches were released to a...

CVE-2012-2889

Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...

CVE-2012-2889

CVE-2012-2889 is a cross-site scripting (UXSS) vulnerability in WebKit/Chromium that allows a remote attacker to inject script via frame handling in Chrome versions prior to 22.0.1229.79. The CVE is referenced in openSUSE/OpenSUSE security advisories and Safari/Nessus entries, confirming the fram...

CVE-2012-2889: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...

CVE-2012-2886: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...

PT-2012-4335

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings. This is also known as "Universal XSS UXSS"...

PT-2012-4338

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving frames. This is also known as "Universal XSS UXSS". Recommendations...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...

Cross site scripting

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS UXSS" attacks against the current tab...