CVE-2022-38164

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser only display certain part of the entire URL...

CVE-2022-38163

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

Design/Logic Flaw

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

F-Secure Safe Browser 安全漏洞

F-Secure Safe Browser is an Internet security browser from Finnish company Fen Secure F-Secure. It is used to block viruses, Trojans, ransomware and other threats in real time. A security vulnerability exists in F-Secure Safe Browser that originates from a maliciously crafted website that may...

CVE-2022-38164

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser only display certain part of the entire URL...

CVE-2022-38163

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

CVE-2022-38164

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser only display certain part of the entire URL...

PT-2022-24251 · F Secure · F-Secure Safe Browser

Name of the Vulnerable Software and Affected Versions: F-Secure SAFE browser for Android and iOS affected versions not specified Description: A maliciously crafted website could make a phishing attack with URL spoofing as the browser only displays a certain part of the entire URL. Recommendations...

CVE-2022-43052: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete...

PT-2022-24250 · F Secure · F-Secure Safe Browser

Name of the Vulnerable Software and Affected Versions: F-Secure SAFE Browser versions prior to 19.0 Description: A Drag and Drop spoof vulnerability was discovered, allowing a spoofing of the address bar when a user performs a drag and drop operation on the address bar. Recommendations: For...

CVE-2022-38163

The CVE-2022-38163 entry describes a drag-and-drop spoof vulnerability in F-Secure SAFE Browser for Android and iOS (versions = 19.0.1 or newer as applicable) and to avoid drag-and-drop actions on the address bar until patched. If details are updated (e.g., explicit exploit activity), they should...

CVE-2022-38163: User Interface (UI) Misrepresentation of Critical Information

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

CVE-2022-43051: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=deletetest...

CVE-2022-38164: Authentication Bypass by Spoofing

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser only display certain part of the entire URL...

CVE-2022-38163

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

CVE-2022-3868: Improper Neutralization

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=savequote. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. Th...

CVE-2022-43062: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteappointment...

CVE-2022-43063: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=deleteclient...

CVE-2022-43068: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

What Does The Fox Hack? Breaking Down the Anonymous Fox F-Automatical Script

While performing routine security research, one of our threat analysts discovered the latest version of a Command and Control C2 script, which is referred to as F-Automatical within the script’s code and was commonly known as FoxAuto in older versions. This is the seventh version of this automati...