Open redirect

In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain...

Directory Traversal

360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url./n...

Open redirect

Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a 1 URL in the startat parameter to xda/help/en/default.htm or 2 /%09/ slash encoded horizontal tab slash followed by...

finearts.uvic.ca XSS vulnerability

Vulnerable URL: https://finearts.uvic.ca/theatre/phoenix/season/2008-2009/Darkmoon/svcore/full.html?bg=xss"=https%3A%2F%2Ffinearts.uvic.ca%2Ftheatre%2Falumni%2Fprofiles%2Fdesigners%2FPatrickDuWors%2Fgallery.xml=false=true=false=true=true=false=%23fff=%23fff=true=-1 Details: Description| Value...

CVE-2015-3198

The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via a "/" at the end of a URL...

X (Formerly Twitter): Open Redirect

Hello, i found Open Redirect POC : - go to...

CVE-2017-5943

CVE-2017-5943 affects Request Tracker (RT) 4.x series. A remote attacker can obtain CSRF verification tokens by sending a crafted URL, enabling leakage of token data. Affected versions include RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2. CVSS appears high (8.8) with network ...

microlab.uwyo.edu XSS vulnerability

Vulnerable URL: http://microlab.uwyo.edu/Labs/labpage.asp?LabCombo=1"...

Radancy: Open redirect on https://werkenbijdefensie.nl/

Domain and URL: https://werkenbijdefensie.nl/ajax/contrast.php?contrast=1 Description: By adding "?contrast=1" after every url, it wil be redirect to the path after https://werkenbijdefensie.nl/ So I can redirect it to another website by adding one more slash F196351 Browsers Verified In: Any...

CVE-2017-9324

The CVE-2017-9324 issue affects OTRS versions 3.3.x (up to 3.3.16), 4.x (up to 4.0.23), and 5.x (up to 5.0.19). A user with agent permissions can open a crafted URL (index.pl?Action=Installer with ;Subaction=Intro/Start/System) to gain administrative privileges, then read and modify all system se...

Information Disclosure

Moodle is vulnerable to information disclosure. The submission plugin in the assignment module allows attackers to read or modify other user's submission comments through URL manipulation...

Directory Traversal

gomeplus-h5-proxy is vulnerable to directory traversal attacks. These attacks are possible by putting ../ in a url...

Directory Traversal

badjs-sourcemap-server is vulnerable to directory traversal attacks. Theses attacks are possible by placing ../ in a url...

CVE-2017-8875

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...

blueandme.net XSS vulnerability

Vulnerable URL: http://www.blueandme.net/blueandme/index.aspx?brand=fga〈="alert/OPENBUGBOUNTY/...

vannes.brit-hotel.fr XSS vulnerability

Vulnerable URL: http://vannes.brit-hotel.fr/mapframe.php?lat=;...

New Relic: A user with restricted privileges is able to view Phone Number + Billing Email of account owner

Hello - A user with restricted access is able to view the phone number and the billing email of the account owner by simply ".json" at the end of the "https://rpm.newrelic.com/accounts/" URL. The URL structure looks like this: https://rpm.newrelic.com/accounts/██████.json Wherin "███████" is the...

Drupal 7.x < 7.24 Multiple Vulnerabilities

Binary data 9727.prm...

Nextcloud: Content spoofing in lookup.nextcloud.com

Scenerio An attacker can include any arbitrary text using specially crafted nextcloud url. This is done using character /%0d%0a. Steps 1 Attacker distributed the below url by means of spamming or through his website...

FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel

Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...