OneWeb: text injection and content spoofing

SUMMARY: Their is a vulnerability TEXT INJECTION and content inejction. in your website. An attacker can use text injection vulnerability to present a customized message on the application that can phish users into believing that the . steps: 1: https://█████████.oneweb.net 2: ADD payload...

XVIDEOS: Text injection or content spoofing on forbiden page

hello Team, while enumerating directories of xvideos.com i found that 403 forbiden directories are refleting on the page , so i created some custom words to change the mind of customers that the website is under construction so please visit attaker site. reproduction speps: domain : www.xvideos.c...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 prior to 2.80.80.80 and iDRAC9 prior to 5.00.00.00 are affected by a Content spoofing / Text injection vulnerability. A malicious URL can inject text to present a customized message in the iDRAC UI, enabling phishing-like deception. Public references describe this as a spoofing/te...

CVE-2021-21580: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

PT-2021-14626

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC8 versions prior to 2.80.80.80 Dell EMC iDRAC9 versions prior to 5.00.00.00 Description The issue is related to content spoofing and text injection, where a malicious URL can inject text to present a customized message on the...

CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...

PT-2021-21261

Name of the Vulnerable Software and Affected Versions Edifecs Transaction Management versions prior to 2021-07-12 Description The issue allows an unauthenticated user to inject arbitrary text into a user's browser via the "logon.jsp?logon error=" parameter on the login screen of the Web...

Edifecs Transaction Management injection vulnerability

Edifecs Transaction Management is a solution from Edifecs, Inc. that correlates clinical and administrative data, provides real-time visibility into transactions, and enables self-service capabilities for business and technical teams. An injection vulnerability exists in Edifecs Transaction...

CVE-2021-35451

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

CVE-2021-35451

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

CVE-2021-35451: Improper Neutralization of Input During Web Page Generation

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

PT-2021-20916

Name of the Vulnerable Software and Affected Versions: Teradici PCoIP Management Console-Enterprise version 20.07.0 Description: The issue allows an unauthenticated user to inject arbitrary text into a user's browser via the Web application. This can potentially lead to unauthorized access or...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

Zammad Text Injection/Content Spoofing Vulnerability

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from a text injection/content spoofing vulnerability. A remote attacker can exploit this vulnerability to trick a user into visiting the attacker's page...

CVE-2021-35300

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page...

CVE-2021-35300

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page...

CVE-2021-35300

Technical details (affected product, versions, root cause, and remediation) are not publicly provided in the supplied connected documents for CVE-2021-35300; monitor for updates.