889 matches found
CVE-2017-1000142: Undefined Security Weakness
Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete their submitted page through URL manipulation...
PT-2025-32250
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.66 Description A lack of proper validation of untrusted input within the Core component of Google Chrome permitted a remote attacker to manipulate the Omnibox URL bar display through a specially craft...
Open redirect
In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain...
Directory Traversal
360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url./n...
Open redirect
Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a 1 URL in the startat parameter to xda/help/en/default.htm or 2 /%09/ slash encoded horizontal tab slash followed by...
finearts.uvic.ca XSS vulnerability
Vulnerable URL: https://finearts.uvic.ca/theatre/phoenix/season/2008-2009/Darkmoon/svcore/full.html?bg=xss"=https%3A%2F%2Ffinearts.uvic.ca%2Ftheatre%2Falumni%2Fprofiles%2Fdesigners%2FPatrickDuWors%2Fgallery.xml=false=true=false=true=true=false=%23fff=%23fff=true=-1 Details: Description| Value...
CVE-2015-3198
The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via a "/" at the end of a URL...
X (Formerly Twitter): Open Redirect
Hello, i found Open Redirect POC : - go to...
CVE-2017-5943
CVE-2017-5943 affects Request Tracker (RT) 4.x series. A remote attacker can obtain CSRF verification tokens by sending a crafted URL, enabling leakage of token data. Affected versions include RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2. CVSS appears high (8.8) with network ...
microlab.uwyo.edu XSS vulnerability
Vulnerable URL: http://microlab.uwyo.edu/Labs/labpage.asp?LabCombo=1"...
Radancy: Open redirect on https://werkenbijdefensie.nl/
Domain and URL: https://werkenbijdefensie.nl/ajax/contrast.php?contrast=1 Description: By adding "?contrast=1" after every url, it wil be redirect to the path after https://werkenbijdefensie.nl/ So I can redirect it to another website by adding one more slash F196351 Browsers Verified In: Any...
CVE-2017-9324
The CVE-2017-9324 issue affects OTRS versions 3.3.x (up to 3.3.16), 4.x (up to 4.0.23), and 5.x (up to 5.0.19). A user with agent permissions can open a crafted URL (index.pl?Action=Installer with ;Subaction=Intro/Start/System) to gain administrative privileges, then read and modify all system se...
Information Disclosure
Moodle is vulnerable to information disclosure. The submission plugin in the assignment module allows attackers to read or modify other user's submission comments through URL manipulation...
Directory Traversal
gomeplus-h5-proxy is vulnerable to directory traversal attacks. These attacks are possible by putting ../ in a url...
Directory Traversal
badjs-sourcemap-server is vulnerable to directory traversal attacks. Theses attacks are possible by placing ../ in a url...
CVE-2017-8875
CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...
blueandme.net XSS vulnerability
Vulnerable URL: http://www.blueandme.net/blueandme/index.aspx?brand=fga〈="alert/OPENBUGBOUNTY/...
vannes.brit-hotel.fr XSS vulnerability
Vulnerable URL: http://vannes.brit-hotel.fr/mapframe.php?lat=;...
New Relic: A user with restricted privileges is able to view Phone Number + Billing Email of account owner
Hello - A user with restricted access is able to view the phone number and the billing email of the account owner by simply ".json" at the end of the "https://rpm.newrelic.com/accounts/" URL. The URL structure looks like this: https://rpm.newrelic.com/accounts/██████.json Wherin "███████" is the...
