Lucene search
+L

38 matches found

Kitploit
Kitploit
•added 2026/09/28 9:48 a.m.•9 views

CVE-2021-43530-UXSS-On-QRcode-Reader-

CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...

6.1CVSS6.6AI score0.01414EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•0 views

CVE-2026-32834: Use of Hard-coded Credentials

Easy PayPal Events & Tickets plugin for WordPress version 1.3 and earlier contain a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying 'test' as the hash parameter. Attackers can...

8.7CVSS5.9AI score0.00791EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2018-15686

Malware in sbrugna...

9.1CVSS9.2AI score0.02582EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2018-15684

Malware in sbrugna...

8.3CVSS8.1AI score0.01932EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•38 views

EUVD-2018-15685

Malware in sbrugna...

8.3CVSS8.1AI score0.01932EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 6:50 p.m.•13 views

CVE-2021-43530

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 94...

6.1CVSS5.5AI score0.01414EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2025/03/04 2:15 p.m.•16 views

CVE-2025-27425

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first This vulnerability affects Firefox for iOS 136...

4.3CVSS6.6AI score0.00231EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/04 2:15 p.m.•28 views

CVE-2025-27425

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136...

4.3CVSS0.00231EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/04 1:31 p.m.•15 views

CVE-2025-27425 QR code user confirmation bypass with invalid protocol

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136...

5.8AI score0.00231EPSS
SaveExploits0References2
Mozilla
Mozilla
•added 2025/02/24 12:00 a.m.•36 views

Security Vulnerabilities fixed in Firefox for iOS 136 — Mozilla

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page Scanning certain QR codes that included text with a website URL could...

5.4CVSS6.6AI score0.0026EPSS
SaveExploits0References3Affected Software1
Schneier on Security
Schneier on Security
•added 2025/02/10 12:00 p.m.•19 views

Pairwise Authentication of Humans

Here's an easy system for two humans to remotely authenticate to each other, so they can be sure that neither are digital impersonations. To mitigate that risk, I have developed this simple solution where you can setup a unique time-based one-time passcode TOTP between any pair of persons. This i...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/07/01 12:00 a.m.•19 views

Brave Browser Android 输入验证错误漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability previously existed in Brave Browser Android version 1.52.117, which originated from an open redirection vulnerability that could be triggered when scanning a QR code QR code...

6.1CVSS6.2AI score0.0045EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/16 10:15 p.m.•45 views

CVE-2019-17003

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed...

6.1CVSS6.3AI score0.00411EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/02/16 12:00 a.m.•18 views

Mozilla Firefox 跨站脚本漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox, which originates from a Javascript execution when scanning a QR code containing a javascript: URL...

6.1CVSS6.5AI score0.00411EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/16 12:00 a.m.•16 views

CVE-2019-17003

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed...

7AI score0.00411EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/12/22 12:00 a.m.•10 views

CVE-2022-22749

When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 96...

3.8AI score0.00421EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/01/26 12:00 a.m.•22 views

The vulnerability of the Covid-19 contact tracing system’s web app that uses QR code scanning lies in the insufficient protection of operational data, allowing attackers to carry out cross-site attacks.

The vulnerability of the Covid-19 contact tracing system’s web app with QR code scanning lies in the insufficient protection of sensitive data when the username parameter is used on the login page. Exploiting this vulnerability could allow a malicious actor to perform cross-site attacks using a...

10CVSS5.5AI score
SaveExploits0References5Affected Software1
Packet Storm
Packet Storm
•added 2021/09/01 12:00 a.m.•636 views

COVID-19 Contact Tracing System With QR Code Scanning 1.0 SQL Injection

Exploit Title: Covid-19 Contact Tracing System Web App with QR Code Scanning CTS-QR by: oretnom23 v1.0 remote SQL-Injection-Bypass-Authentication in /ctsqr/classes/Login.php + XSS-Stored PWNED PHPSESSID Vulnerable parameter "code" in applicatoin State/Province List. Author: nu11secur1ty Testing a...

0.2AI score
SaveExploits0
zdt
zdt
•added 2021/08/31 12:00 a.m.•252 views

COVID-19 Contact Tracing System With QR Code Scanning 1.0 SQL Injection Exploit

COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Covid-19 Contact Tracing System Web App with QR Code Scanning CTS-QR by: oretnom23 v1.0 remote...

0.4AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/08/31 12:00 a.m.•271 views

Covid-19 Contact Tracing System Web App with QR Code Scanning - SQL-Injection-Bypass-Authentication

The Covid-19 Contact Tracing System Web App with QR Code Scanning is vulnerable in the application /ctsqr/classes/Login.php from SQL-Injection-Bypass-Authentication m0re info: . The parameter username from the login form is not protected correctly and there is no security and escaping from...

0.4AI score
SaveExploits0References1
Rows per page
Query Builder