Design/Logic Flaw

Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/websitesettings/websitesettingspopupview.cc...

UBUNTU-CVE-2015-6780

Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/websitesettings/websitesettingspopupview.cc...

CVE-2015-6780

CVE-2015-6780 is a use-after-free vulnerability in Google Chrome’s Infobars component (early Chrome/Chromium builds) prior to 47.0.2526.73, related to browser/ui/views/website_settings/website_settings_popup_view.cc. The issue could allow a remote attacker to cause a denial of service via a craft...

CVE-2015-6780

Removed by vendor...

The vulnerability of Google Chrome browser allows a perpetrator to replace data.

The android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java file of the Google Chrome browser contains errors related to improper restriction of URL identifiers when creating pop-up windows. As a result, attackers may be able to replace the data displayed in the pop-up windows...

CVE-2015-3334

CVE-2015-3334 affects Google Chrome prior to 42.0.2311.90, where the Permissions UI could fail to consistently display the camera permission status (“Media: Allowed by you”). This mismatch could allow remote websites to capture video data from an attached camera without the user realizing permiss...

CSCMS V3.5 最新版 后台命令执行GETSHELL（源码详析）

简要描述： CSCMS V3.5 最新版 后台PHP命令执行GETSHELL（源码详析） CSCMS的全新架构加强了安全性，以往的一串漏洞均已修复， 读代码，发现还有新的漏洞 代码分析见详细说明，测试演示在漏洞证明里 详细说明： 漏洞位置为后台的 网站设置-第三方登录设置 中 有关代码如下： /app/controllers/admin/setting.php line:426 public function dengluedit //设置第三方登录的几项配置 $this-CsdjAdmin-AdminQx'4'; //注意，本处已使用xssclean过滤特定字符，之后的结论会用到...

Stable Channel Update

The Stable channel has been updated to 23.0.1271.97 for Windows, Mac, Linux, and ChromeFrame platforms. This build contains the following fixes: Some texts in a Website Settings popup are trimmed Issue: 159156 Linux: selection renders white text on white bg in apps Issue: 158422 some plugins...

Cross-site Request Forgery (CSRF) Vulnerabilities in Pragyan CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pragyan CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in Pragyan CMS 1.1 The vulnerability exists due to insufficient validation of...

Multiple Vulnerabilities in ViArt Shop

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ViArt Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in ViArt Shop The vulnerability exists due to input sanitation...

Cross-site Request Forgery (CSRF) Vulnerabilities in diafan.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in diafan.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in diafan.CMS 1.1 The vulnerability exists due to insufficient validation of th...

Multiple Vulnerabilities in Diferior

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Diferior which could be exploited to perform script insertion and cross-site request forgery attacks. 1 Script insertion vulnerability in Diferior: CVE-2010-4850 Input passed to the "postcontent" parameter in...

Cross-site Request Forgery (CSRF) Vulnerabilities in Webmatic

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmatic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Webmatic 1.1 The vulnerability exists due to insufficient validation of the request origin in...