360 matches found
CVE-2018-18207
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
Design/Logic Flaw
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
CVE-2018-18207
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
CVE-2018-18207
CVE-2018-18207 affects Virtualmin 6.03. The vulnerability arises from a flaw in the settings-editor_read.cgi file parameter, enabling Frame Injection . Exploitation details or successful exploit status are not provided in the connected documents. No remediation details are specified here.
Virtualmin 6.03 Multiple Vulnerabilities
Exploit for cgi platform in category web applications Exploit Title: Virtualmin 6.03 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: https://www.virtualmin.com/ Software Link: https://www.virtualmin.com/download.html Version: 6.03...
CVE-2018-18207: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...
Security Bulletin: Rational ClearCase and ClearQuest Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Summary Java API Documentation contains a frame injection vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVEID: CVE-2013-1571...
Security Bulletin: Rational Performance Tester Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Summary IBM Rational Performance Tester Java API Documentation contains a frame injection vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--...
Security Bulletin: IBM Rational Service Tester Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Summary Java API Documentation contains a frame injection vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVEID: CVE-2013-1571...
Security Bulletin: IBM Rational Build Forge Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Summary Java API Documentation contains a frame injection vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVEID: CVE-2013-1571...
Security Bulletin: Multiple Vulnerabilities in IBM Initiate Master Data Service (CVE-2014-4789, CVE-2014-4788, CVE-2014-4787, CVE-2014-4786, CVE-2014-4785, CVE-2014-4784, CVE-2014-4783)
Summary Multiple Vulnerabilities discovered in web UI components of IBM Initiate Master Data Service. Vulnerability Details CVE-ID: CVE-2014-4789 DESCRIPTION: IBM Initiate Master Data Service could allow a remote attacker to hijack a valid user's session, caused by the failure to update the sessi...
CVE-2018-5116
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...
CVE-2018-5116: Origin Validation Error
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...
UBUNTU-CVE-2018-5116
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...
Automattic: Crafted frame injection leading to form-based UI redressing.
Summary One can inject iframes into a note and create a login form that sends the user's details to a third-party server. Once again I will let the PoC do most of the explaining. PoC Paste the following snippet into a Simplenote and then view it in the preview panel. I am using the latest stable...
WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
WIMAX LX350PWIXFMR-108 - Multiple Vulnerabilities Exploit Title: WIMAX LX350PWIXFMR-108 - Multiple Vulnerabilities Date: ˝Friday, ˝December ˝11, ˝2015 Exploit/Vulnerability Author: Alireza Azimzadeh Milani alimp5 Vendor Homepage: http://www.greenpacket.com Version: v2.10.14-g1.5.2 Tested on:...
WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: WIMAX LX350PWIXFMR-108 - Multiple Vulnerabilities Date: ˝Friday, ˝December ˝11, ˝2015 Exploit/Vulnerability Author: Alireza Azimzadeh Milani alimp5 Vendor Homepage: http://www.greenpacket.com Version: v2.10.14-g1.5.2 Tested...
Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Title : Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability Author : ZwX Vendor : http://www.subrion.com/ Severity Level : Medium Tested on : Windows 7 ------------------------ Description ------------------------ An attacker can inject ...
ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities EMC Identifier: ESA-2014-180 CVE Identifier: CVE-2014-4635, CVE-2014-4636, CVE-2014-4637, CVE-2014-4638, CVE-2014-4639 Severity Rating: See below for individual scores for each...
