Khan Academy: OPEN URL REDIRECT through PNG files

An abuse of the imageurl parameter when saving a CS program was able to create an arbitrary external redirect. We now validate the parameter before using it. I have found a way through which an attacker can use png files to redirect to malicious domain...

sabacp.com vulnerability

Vulnerable URL: http://www.sabacp.com/website/openurl.php?i=8=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 4352752 Google Pagerank| 0 VIP website status:| No Check sabacp.com SS...

PayPal Inc - Open URL Redirect Web Vulnerability

Document Title: =============== PayPal Inc - Open URL Redirect Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1611 Video: https://www.youtube.com/watch?v=uI1a7EgHNNU Release Date: ============= 2015-10-01 Vulnerability Laboratory ID VL-ID:...

PayPal Inc - Open URL Redirect Web Vulnerability

Document Title: =============== PayPal Inc - Open URL Redirect Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1611 Video: https://www.youtube.com/watch?v=uI1a7EgHNNU Release Date: ============= 2015-10-01 Vulnerability Laboratory ID VL-ID:...

Imgur: Open Url redirection on login with facebook

steps to produce: 1, go to the site imgur.com and login with facebook and if you are new user then u must be asked for username on the link https://imgur.com/register/thirdparty/facebook?redirect=http://imgur.com/ nw just change the parameter redirect= value to https://google.com and hit enter an...

Yahoo!: ads.yahoo.com Unvalidate open url redirection

Thank you for your submission to Yahoo’s Bug Bounty program. While we recognize the effort that you put into the research and writing of a report for us to evaluate, but unfortunately this bug has already been reported to us. We appreciate your adherence to responsible disclosure guidelines and...

Coinbase: Improper Validation of the Referrer header leading to Open URL Redirection

Using a proxy tool such as Burp, set the Target as https://coinbase.com. Then, send the following request: GET /cdn-cgi/l/chkjschl HTTP/1.1 Host: coinbase.com Referer: http://attacker.com Content-Length: 2 Notice the attacker's domain in the Referrer header. This value is not being validated on t...

Yahoo!: Open URL Redirection

Thank you for your submission to Yahoo’s Bug Bounty program. While we recognize the effort that you put into the research and writing of a report for us to evaluate, but this functionality is working as designed. We appreciate your adherence to responsible disclosure guidelines and look forward t...

Facebook Open URL Redirection vulnerability

Security Researcher Dan Melamed discovered an Open URL redirection vulnerability in Facebook that allowed him to have a facebook.com link redirect to any website without restrictions. An open URL Redirection flaw is generally used to convince a user to click on a trusted link which is specially...

Facebook Open URL Redirection vulnerability

Security Researcher Dan Melamed discovered an Open URL redirection vulnerability in Facebook that allowed him to have a facebook.com link redirect to any website without restrictions. An open URL Redirection flaw is generally used to convince a user to click on a trusted link which is specially...

CubeCart 5.0.7 and lower | Open URL Redirection Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CubeCart 5.0.7 Open URL Redirection

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CubeCart 4.4.6 Open URL Redirection

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection

OVERVIEW F5 FirePass SSL VPN is vulnerable to Open URL Redirection. 2. BACKGROUND F5 FirePass SSL VPN provides secure remote access to enterprise applications and data for users over any device or network while protecting your corporate. See http://www.f5.com/pdf/products/firepass-overview.pdf...

SilverStripe CMS 2.4.7 <= Arbitrary URL Redirection

OVERVIEW SilverStripe 2.4.7 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND SilverStripe CMS is easy for both developers and content authors to work with. The SilverStripe Framework keeps the code tucked away neatly so that it can be accessed easily by programmers but...

F5 FirePass SSL VPN Open URL Redirection

OVERVIEW F5 FirePass SSL VPN is vulnerable to Open URL Redirection. 2. BACKGROUND F5 FirePass SSL VPN provides secure remote access to enterprise applications and data for users over any device or network while protecting your corporate. See http://www.f5.com/pdf/products/firepass-overview.pdf...

ocPortal 7.1.5 <= | Open URL Redirection Vulnerability

OVERVIEW ocPoral CMS 7.1.5 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's powerful feature-set means there's always a way to accomplish your vision. Not...

GOM Media Player 'Open URL' Feature Unspecified Vulnerability (Windows)

This host is installed with GOM Media Player and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodgomplayeropenurlunspecifiedvulnwin.nasl 5956 2017-04-14 09:02:12Z teissa $ GOM Media Player 'Open URL' Feature Unspecified Vulnerability Windows Authors: Madhuri D...

GOM Media Player 'Open URL' Feature Unspecified Vulnerability - Windows

GOM Media Player is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1774

Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-5779 and CVE-2012-1264...