Server-Side Request Forgery (SSRF)

moodle/moodle is vulnerable to server-side request forgery SSRF. An attacker is able to submit requests on behalf of the server via the editblog.php script that allows adding of external RSS feed resources. A malicious URL/TCP PORT can be added as an RSS feed resource which would cause the server...

HangZhou XiongMai Technologies Net Surveillance 'DVR.html' Authentication Bypass Vulnerability

The remote installation of HangZhou XiongMai Technologies Net Surveillance is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

Code injection

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

CVE-2018-18496 is a clickjacking vulnerability in Mozilla Firefox’s feed preview page about:feeds. When the RSS Feed preview is framed in another page, scripted content can coerce a user into downloading and executing an executable from a temporary directory. It affects Firefox versions earlier t...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496: Improper Restriction of Rendered UI Layers or Frames

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

AXIS Camera Unsecured Feed Detection

The remote host seems to be an Axis Network Camera. It was possible to access the camera feed remotely without supplying credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid122369; scriptversion"1.5"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"AXIS...

Web-Dorado Plugin XSS

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...

CVE-2019-6223

creationtimestamp| type| source ---|---|--- 2019-02-08 08:59:04+00:00| seen| https://t.me/ctinow/7951 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:24:57+00:00| seen|...

CVE-2019-7287

creationtimestamp| type| source ---|---|--- 2019-02-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=361 2019-02-08 16:50:09+00:00| exploited| https://t.me/alexmakus/2622 2019-02-08 16:55:16+00:00| exploited| https://t.me/antichat/3546 2020-10-09 14:38:27+00:00| seen|...

chat feed Component Arbitrary Code Injection

The vulnerability of the “chat feed” component of the Cisco SocialMiner automation software exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded by...

Instagram Feed <= 1.11.3 - Unspecified Issues

The Smash Balloon Social Photo Feed WordPress plugin was affected by an Unspecified Issues security vulnerability...

Cisco SocialMiner Cross-Site Scripting Vulnerability (CNVD-2019-02746)

Cisco SocialMiner is the United States Cisco Cisco a social media call center solution. The solution supports social media monitoring and analytics. A cross-site scripting vulnerability exists in the chat feed functionality of Cisco SocialMiner, which stems from the program's failure to adequatel...

CVE-2019-1668

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...

Cross site scripting

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1668

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...