199 matches found
Smule: Error Page Content Spoofing or Text Injection
Description: -------------- Content spoofing, also referred to as content injection, "arbitrary text injection" or virtual defacement, is an attack targeting a user made possible by an injection vulnerability in a web application. When an application does not properly handle user-supplied data, a...
Cisco Webex Business Suite Input Validation Error Vulnerability
Cisco Webex Business Suite is a set of video conferencing solutions from the U.S. company Cisco Cisco. An input validation error vulnerability exists in Cisco Webex Business Suite, which arises from the program not properly validating input. An attacker could exploit this vulnerability by trickin...
Input validation
A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...
CVE-2019-1680
A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...
SUSE SLES11 Security Update : mailman (SUSE-SU-2019:13924-1)
This update for mailman fixes the following issues : Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs bsc1077358 CVE-2018-5950 Fixed a directory traversal vulnerability in MTA...
CFP Time: Content spoofing on error pages or text injection
Poc: https://www.cfptime.org/%20is%20not%20available%20anymore%20,%20pls%20go%20to%20WWW.EVIL.COM%20because%20this%20site. Steps to reproduce: 1: Just browse this target on any browser 2: Target: http://www.cfptime.org/ 3: add any content after For example: this is not available anymore pls check...
SUSE-SU-2019:13924-1 Security update for mailman
This update for mailman fixes the following issues: - Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs bsc1077358 CVE-2018-5950 - Fixed a directory traversal vulnerability in MTA...
CFP Time: Error Page Content Spoofing or Text Injection
Description: hello sir, i found that one you once you write any thing after / in www.cfptime.org/ is reflected in the error page example go to www.cfptime.org/texthere you will see test here in the 404 error page Steps To Reproduce: 1.go...
SUSE SLES12 Security Update : mailman (SUSE-SU-2018:4296-1)
This update for mailman fixes the following security vulnerabilities : Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs bsc1077358 CVE-2018-5950 Fixed a directory traversal...
SUSE-SU-2018:4296-1 Security update for mailman
This update for mailman fixes the following security vulnerabilities: - Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs bsc1077358 CVE-2018-5950 - Fixed a directory traversal...
Hanno's projects: Text injection at https://media.hboeck.de
Text injection possible at https://media.hboeck.de if we craft url like this: https://media.hboeck.de/?c=http://www.example.com We can see the output on web app. Impact Defacement of website by following crafted link...
MyCrypto: Content Spoofing or Text Injection support.mycrypto.com
w2w reported a text injection attack where the user could be shown arbitrary text injected via query parameters. The MyCrypto team worked with w2w to resolve these issues, and appreciate the responsible disclosure. We look forward to continuing to work with the security community to triage and...
Tor: Content spoofing on
Vulnerability description not provided...
Tor: Report Regarding Security Vulnerability
Vulnerability description not provided...
Algolia: Text injection on status.algolia.com
Hi Algolia team! I just found a text injection vulnerabilty in status.algolia.com/clusters . Please follow the steps below. Vulnerable URL status.algolia.com Steps to reproduce: Go to Vulnerable URL Add anything you want after the Vulnerable Url. POC LIVE POC F193293 Hope you fix it! Thanks! Sh3r...
Nextcloud: Content Spoofing/Text Injection in https://demo.nextcloud.com
Greetings, Hello Team, I have found a Content Spoofing/Text Injection on this domain https://demo.nextcloud.com PoC URL:https://demo.nextcloud.com/wp-content/cache/minify/%0d%0ahas%20moved%20to%20www.attacker.com.Please%20visit%20attacker.com%20present%20resource PoC Screen Shot: Let me know if y...
Nextcloud: Content Spoofing/Text Injection in nextcloud.com
Greetings, Hello Team, I have found a Content Spoofing/Text Injection on this domain https://nextcloud.com PoC URL: https://nextcloud.com/wp-content/cache/minify/%0d%0ahas%20moved%20to%20www.attacker.com.Please%20visit%20attacker.com%20present%20resource PoC Screen Shot: F168750 Let me know if yo...
CVE-2017-6059
A text injection flaw was found in how modauthopenidc handled error pages. An attacker could potentially use this flaw to conduct content spoofing and phishing attacks by tricking users into opening specially crafted URLs...
Ubiquiti Inc.: Content Spoofing or Text Injection in (403 forbidden page injection) and Nginx version disclosure via response header
Hello there, I know that this is Non-critical issue but i want you guys to be aware of it. 1. I have found a Content Spoofing or Text Injection in This url http://dl-origin.ubnt.com/ Go to this url...