The researchers also provided a description of a Proof-of-Concept (PoC) attacks to steal sensitive data from an unsuspecting user, below the attack scenario: Researchers published a video PoC of the attacks that shows how hackers can steal a user’s Facebook information and data on PayPal transactions. The vulnerability discovered by the experts in the Evernote extension allows an attacker to inject a malicious payload into all iframe contexts and steal credentials, cookies, and other data. The attack scenario sees hackers tricking victims into visiting specially crafted websites that load hidden iframes. The popular extension has over 4.6 million users. The Evernote Web Clipper extension for Chrome allows users to easily save online content to Evernote, including web pages, articles, images, text, and emails. The vulnerability, tracked as CVE-2019-12592, could be exploited by attackers operating malicious websites to bypass the browser’s same-origin policy (SOP) and execute arbitrary code on the victim’s behalf. “A logical coding error made it is possible to break domain-isolation mechanisms and execute code on behalf of the user – granting access to sensitive user information not limited to Evernote’s domain.” You can save all the contents available on the internet forever in your Evernote and access them freely whenever you want.“In May 2019 Guardio’s research team has discovered a critical vulnerability in Evernote Web Clipper for Chrome.” reads a blog post published by Guardio. Whenever you find something interesting or inspiring then you don’t need to copy a single paragraph as you can clip the whole web page easily even without any ads and promotional stuff.

Nothing is out of your reach on the internet as you can capture any web page and transfer them in your Evernote instantly and without any restrictions. Now you can save any piece of information, articles and technical blogs in Evernote directly from any website with the help of a useful browser extension which is called Web Clipper.

How to use evernote web clipper