Design/Logic Flaw

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

Design/Logic Flaw

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

CVE-2022-28873

CVE-2022-28873 describes a vulnerability in the F-Secure SAFE browser where an attacker could abuse the Javascript window.open functionality to perform an address bar spoofing attack. The NVD entry lists a CVSS v3.1 base score of 4.3 (Medium) with attack vector Network, no privileges, user intera...

CVE-2022-28873 Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

CVE-2022-28872

CVE-2022-28872 describes a vulnerability in the F-Secure SAFE browser (Android variant) where a malicious site could trigger phishing via address bar spoofing if navigation fails in a loop. The issue is that the address bar is not correctly represented, enabling deception of the user. The availab...

CVE-2022-28872 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

CVE-2022-29746: Improper Neutralization of Special Elements used in an SQL Command

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete...

PT-2022-19941

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /cms/classes/Master.php?f=delete designation API endpoint. This allows for potential manipulation of database queries...

PT-2022-19276

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser affected versions not specified Description A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop. This issue allows for...

PT-2022-19948

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the f=delete facility parameter. The estimated number of potential...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE. An attacker could exploit the vulnerability to conduct phishing attacks via address bar spoofing...

PT-2022-19812

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "Master.php" file, specifically through the f parameter set to delete transaction, which is located at the...

PT-2022-19277

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser affected versions not specified Description A vulnerability was discovered that affects the F-Secure SAFE browser. It allows an attacker to potentially exploit the Javascript window.open functionality, which could lead to...

PT-2022-19818

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete service endpoint. This allows for potential manipulation of database queries. No information is provided about th...

PT-2022-19813

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns SQL Injection via the "/mtms/classes/Users.php?f=delete" API endpoint. This allows for potential manipulation of database queries. Recommendations For Money Transfer...

PT-2022-19950

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability via the Master.php file, specifically when the f parameter is set to delete. This vulnerability can be exploited through the...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE that originates in the Javascript window.open function that leads to an address bar spoofing attack...

CVE-2022-28872: Undefined Security Weakness

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

PT-2022-19947

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the delete category function. The estimated number of potentially...

PT-2022-19816

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection via the /cms/classes/Master.php?f=delete invoice endpoint. This allows for potential manipulation of database queries. No information is provided about th...