{"vulnerability": "cve-2017-17692", "sightings": [{"uuid": "86c0aa87-53f9-4020-aa10-be335deed2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-17692", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "d3a89841-0490-479c-be6f-3e25de34b360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-17692", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:55.000000Z"}, {"uuid": "528f2638-09f8-4b54-bb0e-1a01cfa68849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-17692", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/samsung_browser_sop_bypass.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "4d21c44f-6c7b-424e-8163-4a8ec1e53169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-17692", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/samsung_browser_sop_bypass.rb", "content": "{\"actions\": [{\"description\": \"Serve exploit via web server\", \"name\": \"WebServer\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Dhiraj Mishra\", \"Tod Beardsley\", \"Jeffrey Martin\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module takes advantage of a Same-Origin Policy (SOP) bypass vulnerability in the\\n          Samsung Internet Browser, a popular mobile browser shipping with Samsung Android devices.\\n          By default, it initiates a redirect to a child tab, and rewrites the innerHTML to gather\\n          credentials via a fake pop-up.\", \"disclosure_date\": \"2017-11-08\", \"fullname\": \"auxiliary/gather/samsung_browser_sop_bypass\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Samsung Internet Browser SOP Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/samsung_browser_sop_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/samsung_browser_sop_bypass\", \"references\": [\"CVE-2017-17692\", \"URL-http://fr.0day.today/exploit/description/28434\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:21.766013Z"}]}