CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11290

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress or Clickjacking vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing or clickjacking attacks...

CVE-2017-11290

Adobe Connect 9.6.2 and earlier are affected by multiple vulnerabilities described in APSB17-35. The issues include: (1) SSRF bypassing network controls (CVE-2017-11291), (2) reflected XSS vulnerabilities (CVE-2017-11287, CVE-2017-11288, CVE-2017-11289), and (3) a UI redress/clickjacking vulnerab...

VK.com: clickjacking в /lead_forms_app.php

Кликджекинг в «Форме сбора заявок». Можно было угнать номер и почту любого человека который нажмет на кнопкуbuton на нашем сайте, я считаю это довольно серьезно, ибо нажать кнопку можно было под любым предлогом, к примеру создав фейковый опрос на нашем сайте, а подтверждением голосования добавить...

pfSense < 2.4.2 RCE and CSRF Vulnerabilities

pfSense is prone to a remote code execution RCE and cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Clickjacking Vulnerability In CSRF Error Page pfSense

This module exploits a Clickjacking vulnerability in pfSense use exploit/unix/http/pfsense/clickjacking msf undefinedclickjacking show actions ...actions... msf undefinedclickjacking set ACTION msf undefinedclickjacking show options ...show and set options... msf undefinedclickjacking run This...

HP Matrix Operating Environment Point Hijacking Vulnerability

HP Matrix Operating Environment is a suite of cloud management software designed for infrastructure services from Hewlett-Packard HP. A point hijacking vulnerability exists in HP Matrix Operating Environment version 7.6 LR1, which can be exploited by an attacker to conduct a clickjacking attack v...

HP Matrix Operating Environment Point Hijacking Vulnerability (CNVD-2017-37920)

HP Matrix Operating Environment is a suite of cloud management software designed for infrastructure services from Hewlett-Packard HP. A point hijacking vulnerability exists in HP Matrix Operating Environment version 7.6 LR1, which can be exploited by an attacker to conduct a clickjacking attack v...

Adobe Connect Multiple Vulnerabilities (APSB17-35)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

Adobe Connect Clickjacking Vulnerability

Adobe Connect is an online video conferencing software. A clickjacking vulnerability exists in Adobe Connect 9.6.2 and earlier versions. A remote user can exploit the vulnerability to hijack a target user's mouse clicks to act as the target user to perform actions on a website and obtain...

APSB17-35 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves a critical Server-Side Request Forgery SSRF vulnerability CVE-2017-11291 that could be abused to bypass network access controls. This update also resolves three input validation vulnerabilities rated Important...

Semrush: Following links are vulnerable to clickjacking

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: The below list...

CVE-2017-11461

NetApp OnCommand Unified Manager for 7-mode core package versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface...

CVE-2017-11461

NetApp OnCommand Unified Manager for 7-mode core package versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface...

Design/Logic Flaw

NetApp OnCommand Unified Manager for 7-mode core package versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface...

CVE-2017-11461

NetApp OnCommand Unified Manager for 7-mode core package versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface...

CVE-2017-11461

CVE-2017-11461 concerns NetApp OnCommand Unified Manager for 7-mode (core package) prior to version 5.2.1. The issue is a UI redress/clickjacking vulnerability that could cause a user to perform an unintended action within the web interface. The affected software is the OnCommand Unified Manager ...

MediaWiki Multiple Vulnerabilities (Aug 2012) - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

MediaWiki Multiple Vulnerabilities (Aug 2012) - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...