160 matches found
GHSA-9C9W-9PQ7-F35H Gophish vulnerable to Server-Side Request Forgery
Gophish before 0.11.0 allows SSRF attacks...
Gophish vulnerable to Server-Side Request Forgery
Gophish before 0.11.0 allows SSRF attacks...
GHSA-9H9F-9Q8G-6764 Gophish XSS Vulnerability
Gophish through 0.8.0 allows XSS via a username...
Gophish XSS Vulnerability
Gophish through 0.8.0 allows XSS via a username...
Redcloud - Automated Red Team Infrastructure Deployement Using Docker
Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface. Ideal for your penetration tests, shooting ranges, red teaming and...
Clickjacking
github.com/gophish/gophish is vulnerable to clickjacking. An authenticated administrator can be successfully tricked into clicking a "Reset" button in the settings page which will cause their API key to be reset, resulting in a denial of service to the application...
Gophish Cross-Site Scripting Vulnerability
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish versions prior to 0.11.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "IMAP Host" field on the account settings page...
Gophish Cross-Site Scripting Vulnerability (CNVD-2020-59720)
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish 0.10.1 and earlier versions. An attacker can exploit this vulnerability through a specially crafted landing page or email template to conduct cross-site scripting attacks...
Gophish cookie non-expiration vulnerability
Gophish is a powerful open source phishing framework. A cookie non-expiration vulnerability exists in Gophish 0.10.1 and earlier versions. The vulnerability stems from Gophish not invalidating the gophish cookie after logging out. No details of the vulnerability are provided at this time...
Gophish Cross-Site Scripting Vulnerability (CNVD-2020-59719)
Gophish is a powerful open source phishing framework. A cross-site scripting vulnerability exists in Gophish versions prior to 0.11.0. An attacker can exploit this vulnerability by sending the "host" field on a configuration form to conduct cross-site scripting attacks...
Gophish CSV Injection Vulnerability
Gophish is a powerful open source phishing framework. A CSV injection vulnerability exists in Gophish versions prior to 0.11.0. No detailed vulnerability details are provided at this time...
Gophish Server-Side Cross-Site Request Forgery Vulnerability
Gophish is a powerful open source phishing framework. A server-side cross-site request forgery vulnerability exists in Gophish versions prior to 0.11.0. No detailed vulnerability details are provided at this time...
Gophish denial of service vulnerability
Gophish is a powerful open source phishing framework. A denial of service vulnerability exists in the "Reset" button on the "Account Settings" page in Gophish versions prior to 0.11.0. This vulnerability can be exploited to cause a denial of service via a clickjacking attack...
CVE-2020-24707
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...
CVE-2020-24712
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...
CVE-2020-24708
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...
CVE-2020-24710
Gophish before 0.11.0 allows SSRF attacks...
CVE-2020-24712
Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...