Phishing Webpage Detection: Unveiling the Threat Landscape and Investigating Detection Techniques

In the realm of cybersecurity, phishing stands as a prevalent cyber attack, where attackers employ various tactics to deceive users into gathering their sensitive information, potentially leading to identity theft or financial gain. Researchers have been actively working on advancing phishing...

CVE-2025-43781

Reflected cross-site scripting XSS vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portl...

CVE-2025-59013 Open Redirect in TYPO3 CMS

An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 allows an attacker to redirect users to arbitrary external sites, enabling phishing attacks by supplying a manipulated, sanitized URL...

CVE-2025-42933

creationtimestamp| type| source ---|---|--- 2025-09-09 05:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyeyroa63k2r 2025-09-09 06:45:43+00:00| seen| https://gist.github.com/Darkcrai86/e4cb495943d18b664199d51dd5059d24 2025-09-09 06:59:44+00:00| seen|...

CVE-2025-57665

Element Plus Link component el-link through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol...

PT-2025-36920

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.110 through 7.4.3.128 Liferay DXP versions 2024.Q1.1 through 2024.Q1.12 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q3.1 through 2024.Q3.8 Description: A reflected cross-site...

CVE-2025-58450

creationtimestamp| type| source ---|---|--- 2025-09-08 23:02:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyecqt3c7p2l 2025-09-09 03:17:32+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lyeqzdw3ft26 2026-01-24 22:43:54+00:00| seen|...

CVE-2025-56266

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL...

CVE-2020-36836

creationtimestamp| type| source ---|---|--- 2025-09-06 11:16:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-36836.yaml 2025-09-09 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjgrnt32r 2026-04-08...

Wapiti Web Application Vulnerability Scanner 3.2.5

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

CVE-2025-48549

creationtimestamp| type| source ---|---|--- 2025-09-04 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly24buk43e2d...

It was found that Lynx doesn't parse the authority component of the URL correctly

...

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

CVE-2025-58460

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b92bcd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2025-9839

creationtimestamp| type| source ---|---|--- 2025-09-03 06:22:00+00:00| seen| https://gist.github.com/Darkcrai86/d331772302066ddfaf3eb355e74d7b1b...

CVE-2023-21481

Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attackers to get sensitive information...

CVE-2023-21481

Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attackers to get sensitive information...

SAMSUNG Account 安全漏洞

SAMSUNG Account is an account management software from Samsung South Korea. A security vulnerability exists in SAMSUNG Account versions prior to 14.1.0.0 that stems from improper URL input validation, which could allow a remote attacker to obtain sensitive information...

Cisco Webex Meetings 输入验证错误漏洞

Cisco Webex Meetings is a video conferencing solution from Cisco USA. An input validation error vulnerability exists in Cisco Webex Meetings that stems from insufficient validation of URLs, which could result in redirects to untrusted websites...

CVE-2025-8299

creationtimestamp| type| source ---|---|--- 2025-09-02 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-882/ 2025-09-02 23:31:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvbldulbz2z...