CVE-2022-30386: Improper Neutralization of Special Elements used in an SQL Command

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletefeatured...

CVE-2022-30372: Improper Neutralization of Special Elements used in an SQL Command

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargo...

CVE-2022-28872

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

CVE-2022-28873

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

CVE-2022-28872

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

CVE-2022-28872

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

Design/Logic Flaw

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

Design/Logic Flaw

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

CVE-2022-28873

CVE-2022-28873 describes a vulnerability in the F-Secure SAFE browser where an attacker could abuse the Javascript window.open functionality to perform an address bar spoofing attack. The NVD entry lists a CVSS v3.1 base score of 4.3 (Medium) with attack vector Network, no privileges, user intera...

CVE-2022-28873 Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

CVE-2022-28872 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

CVE-2022-28872

CVE-2022-28872 describes a vulnerability in the F-Secure SAFE browser (Android variant) where a malicious site could trigger phishing via address bar spoofing if navigation fails in a loop. The issue is that the address bar is not correctly represented, enabling deception of the user. The availab...

CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE. An attacker could exploit the vulnerability to conduct phishing attacks via address bar spoofing...

PT-2022-19950

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability via the Master.php file, specifically when the f parameter is set to delete. This vulnerability can be exploited through the...

CVE-2022-28873: Undefined Security Weakness

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

PT-2022-19812

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "Master.php" file, specifically through the f parameter set to delete transaction, which is located at the...

PT-2022-19277

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser affected versions not specified Description A vulnerability was discovered that affects the F-Secure SAFE browser. It allows an attacker to potentially exploit the Javascript window.open functionality, which could lead to...

PT-2022-19811

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the f parameter set to delete fee. Recommendations For Money Transfer...

PT-2022-19947

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the delete category function. The estimated number of potentially...