Browsing: “interaction-less” vulnerabilities