Lucene search
K

11 matches found

NVD
NVD
added 2025/09/03 8:15 p.m.2 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

5.3CVSS0.00077EPSS
Exploits0References2
CVE
CVE
added 2025/09/03 12:0 a.m.11 views

CVE-2025-56139

Summary: CVE-2025-56139 concerns LinkedIn Mobile Application for Android, version 4.1.1087.2. The vulnerability arises because the app does not update link preview metadata (image, title, description) when a user replaces the original URL in a post or comment prior to publishing. As a result, a s...

5.3CVSS6.3AI score0.00077EPSS
Exploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2024/10/02 12:0 p.m.4 views

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

8.6CVSS5.8AI score0.75847EPSS
Exploits6References7
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.1 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, stems from the lack of measures to neutralize XSS alternative syntax. This allows attackers to replace the displayed URL with their own malicious content.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize the XSS alternative syntax. Exploiting this vulnerability allows a malicious actor to substitute the displayed URL with another value...

6.4CVSS0.09548EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.1 views

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of protection for website structures. This allows attackers to replace the displayed URLs with malicious ones.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to replace the displayed URL...

6.4CVSS0.0428EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.1 views

The vulnerability of the Google Chrome browser, related to improper data processing, allows a hacker to replace the content in the Omnibox (URL).

The vulnerability of the Google Chrome browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the content in the Omnibox URL bar using IDN homographs...

7.1CVSS0.0079EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.0 views

The vulnerability of Google Chrome arises from synchronization errors when using a common resource, allowing a perpetrator to replace the content of the Omnibox component (URL).

The vulnerability of Google Chrome arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to replace the content of the Omnibox component URL by using a specially created HTML page...

5.4CVSS0.00264EPSS
Exploits0References8Affected Software2
Hacker One
Hacker One
added 2017/03/21 8:2 a.m.15 views

Brave Software: [iOS] URL can be replaceState by blob URL in iOS Brave

Summary: URL can be replace by blob URL using function history.replaceState Products affected: iOS brave version 1.3.117.02.14.11 Steps To Reproduce: - Add a html named "blob.html" which link is "http://192.168.1.111/blob.html" - And its source is:...

0.7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2016/02/24 12:0 a.m.2 views

The vulnerability of Google Chrome’s browser allows a hacker to replace URLs.

The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...

4.3CVSS0.0118EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2014/10/22 5:21 p.m.2 views

openstack-keystone: configuration data information leak through Keystone catalog

A flaw was found in the keystone catalog URL replacement. A user with permissions to register an endpoint could use this flaw to leak configuration data, including the master admintoken. Only keystone setups that allow non-cloud-admin users to create endpoints were affected by this issue...

4CVSS5.7AI score0.00426EPSS
Exploits1References4
seebug.org
seebug.org
added 2009/12/28 12:0 a.m.17 views

php168 5.0 job.php 信息泄漏漏洞

漏洞分析 看job.php 92行 elseif$job=="download" $rsdb=$db-getone"SELECT FROM $prearticle WHERE aid='$id'"; $fidDB=$db-getone"SELECT FROM $presort WHERE fid='$rsdbfid'"; if$fidDBadmin&&$lfjid $detail=explode",",$fidDBadmin; if inarray$lfjid,$detail $webadmin=1;...

7.1AI score
Exploits0
Rows per page
Query Builder