379 matches found
UBUNTU-CVE-2020-26143
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration...
PT-2021-3061
Name of the Vulnerable Software and Affected Versions ALFA Windows 10 driver version 1030.36.604 Description An issue exists in the WEP, WPA, WPA2, and WPA3 implementations of the ALFA Windows 10 driver, allowing an adversary to inject arbitrary data frames into a protected Wi-Fi network by...
CVE-2021-26711
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...
CVE-2021-26711
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...
Design/Logic Flaw
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...
CVE-2021-26711
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...
CVE-2021-26711
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...
CVE-2021-26711
CVE-2021-26711: A frame-injection vulnerability in the online help of Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter. This is confirmed by multiple connected records referencing the same ...
PT-2021-17105
Name of the Vulnerable Software and Affected Versions Redwood Report2Web versions 4.3.4.5 through 4.5.3 Description A frame-injection issue in the online help of Redwood Report2Web allows remote attackers to render an external resource inside a frame via the "help/Online Help/NetHelp/default.htm"...
CVE-2021-26711: Externally Controlled Reference to a Resource in Another Sphere
A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...
CVE-2019-20511
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
CVE-2019-20511
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
Design/Logic Flaw
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
CVE-2019-20511
CVE-2019-20511 affects ERPNext 11.1.47 and is described as a Frame Injection vulnerability via the blog?blog_category parameter. Red Hat/CNVD-style entries corroborate an injection issue stemming from insufficient input validation on user-supplied data; ERPNext’s styling of a blog category parame...
PT-2020-10487
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for frame injection via the blog category parameter. This can be exploited through the "blog?blog category=" endpoint. The blog category parameter is vulnerable to injection. Recommendations...
CVE-2019-20511: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
Zurmo 3.2.6 Iframe Injection
Frame Injection Vulnerability in Zurmo 3.2.6 Information -------------------- Advisory by Netsparker Name: Frame Injection in Zurmo Affected Software: Zurmo Affected Versions: 3.2.6 Homepage: http://zurmo.org Vulnerability: Frame Injection Severity: Medium Status: Not Fixed Netsparker Advisory...
UBUNTU-CVE-2019-1010310
GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools Reminder Description .. Set the...
Hackers' Operating System Kali Linux Released for Raspberry Pi 4
We've got some really exciting news for you... Offensive Security has released an official version of Kali Linux for Raspberry Pi 4—the most powerful version of the compact computer board yet that was released just two weeks ago with the full 4GB of RAM at low cost and easy accessibility. Based o...
Karenderia CMS 5.1 Content Injection
=========================================================================================== Exploit Title: Karenderia CMS 5.1 - Frame Inj. Dork: N/A Date: 02-07-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: [email protected] Software Link:...