Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Björn Ruytenberg

#20440of 60,450
15.2Total CVSS
Vulnerabilities · 2
High
2
PT-2018-3173
2018-10-23
7.8
CVE-2018-12402
Mozilla
Firefox
The issue is related to the WebBrowserPersist component in Firefox, specifically with errors when executing the "Save Page As..." function. This can allow a remote attacker to gain unauthorized access to protected information. The internal WebBrowserPersist code does not use the correct origin context for a resource being saved, which manifests when sub-resources are loaded as part of the "Save Page As..." functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by including resources otherwise unreachable to the malicious page. Similarly, SameSite cookies are sent on cross-origin requests when the "Save Page As..." menu item is selected to save a page.
PT-2017-15637
2017-08-08
7.4
CVE-2017-3085
Adobe
Flash Player
The issue is a security bypass vulnerability that leads to information disclosure when performing URL redirect. It allows attackers to obtain sensitive information.