4477 matches found
Phishing Attacks
firefox is vulnerable to phishing attacks. The vulnerability exists through a X-Frame-Options bypass using object or embed tags...
Mozilla: X-Frame-Options bypass using object or embed tags
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
Mozilla: X-Frame-Options bypass using object or embed tags
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
Mozilla: X-Frame-Options bypass using object or embed tags
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
CVE-2020-15648
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
CVE-2020-15648
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
CVE-2020-15648
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
Spoofing
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
CVE-2020-15648
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...
PT-2020-21613
Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 78.0.2 Firefox Extended Support Release 78.0.2esr ESR Description The issue involves an X-Frame-Options bypass using object or embed tags. This allows for potential security risks. No information is provided about the...
PT-2020-21612
Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 78.0.2 Firefox Extended Support Release 78.0.2esr ESR Description The issue involves an X-Frame-Options bypass using object or embed tags. This could potentially allow malicious actors to bypass security restrictions...
wagtail-stacks-embed (>=0.1.0, <=0.3.0) potentially affected by CVE-2020-15118 via wagtail (1.7.0)
wagtail PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-stacks-embed =0.1.0, =0.3.0 Source cves: CVE-2020-15118 Source advisory: OSV:GHSA-2473-9HGQ-J7XW...
PT-2020-22733
Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 78.0.2 Firefox Extended Support Release 78.0.2esr ESR Description The issue involves an X-Frame-Options bypass using object or embed tags. This allows for potential security risks. There is no information provided about...
nz.net.osnz.composite:composite-spring-boot-tomcat (5.22) potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (10.0.0-m4)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 10.0.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - nz.net.osnz.composite:composite-spring-boot-tomcat 5.22 Source...
ch.rasc:embeddedtc (>=1.13, <=1.29), ch.rasc:embeddedtc-maven-plugin (>=1.11, <=1.23) +63 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=7.0.52, <=7.0.94)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =7.0.52, =1.13, =1.11, =2.0.19, =0.15.0, =1.0.0, =1.0.0, =1.0.8, =0.3.0, =0.4.0, =0.2.0, =0.1.0, =0.3.0 and more Source cves: CVE-2020-13935 Source advisory: MEND:CVE-2020-13935...
ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3410 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=8.5.4, <=8.5.56)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =8.5.4, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2020-13935 Source...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +4357 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.36)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2020-13935...
Automattic: Stored XSS on app.crowdsignal.com + your-subdomain.survey.fm via Embed Media
Hello there, I found a stored xss vulnerability. Steps: 1. Go to https://app.crowdsignal.com/dashboard 2. Create a quiz. 3. Go to https://app.crowdsignal.com/quizzes/your-quiz-id/question 4. Add Multiple Choice 5. Put a name to answer 1. 6. Click Add media button. F901543 7. Select Embed Media 8...
PT-2020-14570
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 78 Firefox versions prior to 78.0.2 Description The issue allows framing of other websites using object or embed tags, despite those websites disallowing framing with the X-Frame-Options header. Recommendations Fo...