Security fixes:
[$3000][352083] High CVE-2014-3159: Omnibox URL Spoofing (Android). Credit to Keita Haga.
This release also contains the following security fix:
[$1500][406593] Medium CVE-2014-3201: Content spoofing with scrollbar. Credit to Keita Haga.
APPLE-SA-2013-09-18-2 iOS 7
Safari
Available for: iPhone 4 and later,
iPod touch (5th generation) and later, iPad 2 and later
Impact: Visiting a malicious website may allow an arbitrary URL to
be displayed
Description: A URL bar spoofing issue existed in Mobile Safari. This
issue was addressed through improved URL tracking.
CVE-ID
CVE-2013-5152 : Keita Haga of keitahaga.com, Lukasz Pilorz of RBS
次は異なるタイプの脆弱性にも挑戦されるかもしれないコメントをいただきました。
この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。
報告者: keitahaga.com Keita Haga 氏
Nice report.
この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。
報告者: keitahaga.com Keita Haga 氏
この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。いま、 keitahaga.com を訪問して何もコンテンツがないことを確認しようと思ったら、コンテンツが存在して吹いた。
報告者: keitahaga.com Keita Haga 氏
Hi, I'm Keita Haga, a hikikomori living in Kanagawa, Japan.hgkn ...
Security Hall of Fame今回は January - March 2012 です。
The following people have qualified for a Google Security Reward. On behalf of our hundreds of millions of users, we thank the named individuals for helping make Google products safer.
2012-01-09 cloud.comA cross-site scripting issue was addressed. We would like to acknowledge Keita Haga of keitahaga.com for reporting this issue.2012-01-09 appleseed.apple.comAn access control issue was addressed. We would like to acknowledge Christopher SJ Ong for reporting this issue.2012-01-06 consultants.apple.comA cross-site scripting issue was addressed. We would like to acknowledge Himanshu Sharma(нα¢кєя) of www.s3curity.net, Cim Stordal, Belmin Vehabovic, Jose A. Vazquez of spa-s3c.blogspot.com, Keita Haga of keitahaga.com, Olivier Beg of spinozalyceum, and Aditya Gupta, Subho Halder and Dev Kar from KIIT University, India for reporting this issue.2011-12-21 mfi.apple.comA cross-site scripting issue was addressed. We would like to acknowledge Keita Haga of keitahaga.com for reporting this issue.2011-12-19 gsxws2ut.apple.comAn information disclosure issue was addressed. We would like to acknowledge Keita Haga of keitahaga.com and Julius Kivimäki for reporting this issue.
