3 matches found
GHSA-JQ43-Q8MX-R7MQ SwiftTerm Code Injection vulnerability
Impact Attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Credit These...
CVE-2007-2398
Apple Safari 3.0.1 beta 522.12.12 on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout to create an event that modifies the window content, which could facilitate phishin...
CVE-2007-2398
CVE-2007-2398 concerns Apple Safari 3.0.1 beta (522.12.12) on Windows. The flaw allows remote attackers to spoof the window title and address bar by manipulating the location bar and using setTimeout() to trigger an event that changes the main window content, potentially enabling phishing. This i...