Lucene search
+L

86 matches found

The Hacker News
The Hacker News
added 2011/11/27 8:05 a.m.2 views

Exposing 25 Facebook phishing websites

Exposing 25 Facebook phishing websites Geeks at Security Web-Center Found 25 Facebook and list them. Sometimes spammers create fake pages that look like the Facebook login page. When you enter your email and password on one of these pages, the spammer records your information and keeps it. This i...

6.9AI score
SaveExploits0
OSV
OSV
added 2011/08/10 9:55 p.m.11 views

DEBIAN-CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for 1 admin or 2 login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

5.8CVSS6.3AI score0.01525EPSS
SaveExploits0References1
Prion
Prion
added 2011/08/10 9:55 p.m.21 views

Hardcoded credentials

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for 1 admin or 2 login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

5.8CVSS6.7AI score0.01525EPSS
SaveExploits0References5Affected Software1
Atlassian
Atlassian
added 2010/07/13 11:26 a.m.30 views

sudo is decorated with global decorator

The reasoning behind preventing theme developers from theming the admin areas was because if you don't know what you are doing then you can mess things up to such an extent that you are unable to use confluence. By decorating the sudo login pages using the global decorator it exposes the user to...

2.1AI score
SaveExploits0
Atlassian
Atlassian
added 2010/07/13 11:26 a.m.25 views

sudo is decorated with global decorator

The reasoning behind preventing theme developers from theming the admin areas was because if you don't know what you are doing then you can mess things up to such an extent that you are unable to use confluence. By decorating the sudo login pages using the global decorator it exposes the user to...

2.1AI score
SaveExploits0Affected Software1
Prion
Prion
added 2009/02/09 5:30 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder