CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-1667

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a...

CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

RHEL 6 : chromium-browser (RHSA-2016:0707)

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2016-1663

The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of servi...

UBUNTU-CVE-2016-1663

The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of servi...

Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)

CVE 2014-1303 Proof Of Concept for PS4 ============== This repository contains a poc for the CVE 2014-1303 originally disclosed by Liang Chen. It has been tested to work on system firmware 2.03, but should work for systems on a firmware 2.50, the ROP test will however only work on 2.03. Usage...

Sony Playstation 4 (PS4) 2.50 - WebKit Code Execution (PoC)

Sony Playstation 4 PS4 2.50 - WebKit Code Execution PoC CVE 2014-1303 Proof Of Concept for PS4 ============== This repository contains a poc for the CVE 2014-1303 originally disclosed by Liang Chen. It has been tested to work on system firmware 2.03, but should work for systems on a firmware 2.50...

The vulnerability of Google Chrome allows a hacker to inject any Web or HTML code they desire.

The vulnerability of the WebPageSerializerImpl::openTagToString function WebKit/Source/web/WebPageSerializerImpl.cpp in the Google Chrome browser exists due to the improper use of HTML objects. Exploiting this vulnerability allows a remote attacker to inject any Web or HTML code using a specially...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Apple OSX Message cross-domain scripting attacks vulnerability details（CVE-2 0 1 6-1 7 6 4-the vulnerability warning-the black bar safety net

! Apple in 3 months to fix the CVE-2 0 1 6-1 7 6 4 out of CNNVD-2 0 1 6 0 3-3 4 7, is an application-layer vulnerabilities that can lead to a remote attacker by means of a iMessage client leaked all message content and attachments. Contrast to attack the iMessage Protocol, this is a relatively...

iMessage Executes JavaScript URIs as Clickable Links

At the height of the Apple-FBI battle, researchers at Johns Hopkins University tunneled their way through the encryption protocol protecting iMessage to get at content sent via the Apple application Last week, a decidedly less complicated approach surfaced. Rather than having to learn crypto,...

The vulnerability of the WebKit component in the Safari browser and the iOS operating system allows a hacker to trigger a service failure.

The vulnerability of the History component implementation in WebKit of the Safari browser and the iOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure application termination throug...

The vulnerability of the iOS operating system, which allows a hacker to obtain confidential information about the device

The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential device information through a specially crafted web page...

The vulnerability of Safari browser and iOS operating system allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the Page Loading component implemented in WebKit of the Safari browser and the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions or obtain confidenti...

The vulnerability of Safari browser and iOS operating system allows attackers to circumvent port restrictions.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass port restrictions by using a specially crafted website...

The vulnerability of the iOS operating system and the Safari browser allows a hacker to replace the displayed URL address, circumvent existing access restrictions, and obtain confidential information.

The vulnerability of the Page Loading component implemented in WebKit of the iOS operating system and the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to replace the displayed URL address, circumvent existing access...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web pa...

The vulnerability of Safari browser and iOS operating system allows attackers to circumvent existing access restrictions policies and obtain geolocation data.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and obtain geolocation data through a specially crafted...