Mozilla Firefox Security Advisory (MFSA2016-83) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

OneWeb: text injection and content spoofing

SUMMARY: Their is a vulnerability TEXT INJECTION and content inejction. in your website. An attacker can use text injection vulnerability to present a customized message on the application that can phish users into believing that the . steps: 1: https://█████████.oneweb.net 2: ADD payload...

XVIDEOS: Text injection or content spoofing on forbiden page

hello Team, while enumerating directories of xvideos.com i found that 403 forbiden directories are refleting on the page , so i created some custom words to change the mind of customers that the website is under construction so please visit attaker site. reproduction speps: domain : www.xvideos.c...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 prior to 2.80.80.80 and iDRAC9 prior to 5.00.00.00 are affected by a Content spoofing / Text injection vulnerability. A malicious URL can inject text to present a customized message in the iDRAC UI, enabling phishing-like deception. Public references describe this as a spoofing/te...

CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...

Edifecs Transaction Management 注入漏洞

Edifecs Transaction Management is a solution from Edifecs, Inc. that correlates clinical and administrative data, provides real-time visibility into transactions, and enables self-service capabilities for business and technical teams. An injection vulnerability exists in Edifecs Transaction...

CVE-2021-35451

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

Zammad Text Injection/Content Spoofing Vulnerability

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from a text injection/content spoofing vulnerability. A remote attacker can exploit this vulnerability to trick a user into visiting the attacker's page...

CVE-2021-35300

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page...

CVE-2021-35300

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page...

CVE-2021-35300

Technical details (affected product, versions, root cause, and remediation) are not publicly provided in the supplied connected documents for CVE-2021-35300; monitor for updates.

Zammad 注入漏洞

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from a text injection/content spoofing vulnerability. A remote attacker can exploit this vulnerability to trick a user into visiting the attacker's page...

CVE-2021-31832

Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.200 allows a remote ePO DLP administrator to inject JavaScript code into the alert configuration text field. This JavaScript will be executed when an end user...

Sifchain: Error Page Content Spoofing or Text Injection

i want to report a context spoofing or text injection at api-cryptoeconomics.sifchain.finance and market-data.sifchain.finance steps to reproduce: 1: Just browse this target on any browser 2: Target: https://api-cryptoeconomics.sifchain.finance/ 3: Then add any text or content after the "/" , i...

Reddit: Content Spoofing/Text Injection at https://gateway-production.dubsmash.com

Summary:- Hi team i found security issue on your website https://gateway-production.dubsmash.com Description:- I have found a "Content Spoofing/Text Injection" on one of the domain which is in scope https://gateway-production.dubsmash.com in which Using the link the attacker can trick any genuine...

Reddit: Content Spoofing

Vulnerability: Content Spoofing or Text Injection Description: This vulnerability will reflect text on to the web page which is used to scam a victim to visit or send information to a malicious website. Because it is inside the domain and trusted web page, there is chances of scam. Open the Url a...

CVE-2020-29655

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to...