Lucene search
+L

246 matches found

OSV
OSV
added 2020/09/03 5:19 p.m.4 views

GHSA-588M-9QG5-35PQ Reverse Tabnabbing in quill

Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently available...

6.5CVSS5.9AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2020/09/03 5:19 p.m.81 views

Reverse Tabnabbing in quill

Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently available...

4.8AI score
Exploits0References4Affected Software1
Node.js
Node.js
added 2019/07/05 7:3 p.m.18 views

Reverse Tabnabbing

Overview Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently...

6.8AI score
Exploits0Affected Software1
Gitee
Gitee
added 2019/07/01 7:47 p.m.4 views

AndroidSecNotes

It is an offensive tool for Android. The repository contains learning notes about Android Security, specifically about the Android Runtime ART and its debugging tools. The notes cover the format of Dex files, the ART runtime, and the Hook framework. The notes mention the use of the "oatdump" tool...

7.1AI score
Exploits0
Veracode
Veracode
added 2018/12/31 1:21 a.m.6 views

Reverse Tabnabbing

quill is vulnerable to reverse tabnabbing attacks. The vulnerability exists due to the lack of rel property set in the target attribute that is set to blank, allowing tabnabbing attacks...

6.6AI score
Exploits0
Openbugbounty
Openbugbounty
added 2015/11/08 11:30 a.m.13 views

quill-platform.com XSS vulnerability

Vulnerable URL: https://www.quill-platform.com/passwordresets Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1753368 Google Pagerank| 1 VIP website status...

6.3AI score
Exploits0
Rows per page
Query Builder