2323 matches found
Mozilla: Alert dialog could have been spoofed on another site
The Mozilla Foundation Security Advisory describes this flaw as: Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website with the victim website's URL shown...
Mozilla: Alert dialog could have been spoofed on another site
The Mozilla Foundation Security Advisory describes this flaw as: Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website with the victim website's URL shown...
Mozilla: Alert dialog could have been spoofed on another site
The Mozilla Foundation Security Advisory describes this flaw as: Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website with the victim website's URL shown...
PT-2024-21330 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 123 Description: An issue allows an attacker to execute JavaScript from an opened bookmarked page when using an AMP url with a canonical element. Recommendations: For versions prior to 123, update to a versio...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox for iOS, which can be exploited by an attacker to execute script in a victim's web browser using a specially crafted URL in the security...
CVE-2024-0593
creationtimestamp| type| source ---|---|--- 2024-02-21 08:31:54+00:00| seen| https://t.me/ctinow/189325 2024-02-22 04:44:14+00:00| seen| https://t.me/arpsyndicate/3944 2024-03-08 19:26:38+00:00| seen| https://t.me/ctinow/203539 2025-10-05 21:02:30+00:00| seen|...
PT-2024-11689 · Unknown · Livebox Collaboration Vdesk
Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v031 Description: An issue was discovered allowing a URL Redirection to an Untrusted Site Open Redirect under the "/api/v1/notification/createnotification" endpoint. This enables an authenticated...
CLSA-2024-1708417192 libxml2: Fix of 3 CVEs
CVE-2017-7375: add validation for parsed entity references - CVE-2017-7376: fix buffer overflow in URL handling - CVE-2017-8872: free input buffer in xmlHaltParser...
Pimcore Injection Vulnerability
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. An injection vulnerability exists in Pimcore...
The vulnerability of the Microsoft Outlook email client, related to errors in processing input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user open a specially crafted URL address remotely...
CVE-2023-31492
creationtimestamp| type| source ---|---|--- 2024-02-14 22:24:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9971 2024-05-08 13:26:12+00:00| published-proof-of-concept| https://t.me/MrVGunz/1082...
SAP Fiori Security Breach
SAP Fiori, a user experience UX design system for SAP applications from SAP, Germany, provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, delivering a consistent, innovative experience for creators and users. A security...
CVE-2023-45716
Sametime is impacted by sensitive information passed in URL...
The vulnerability of the XWiki platform, a collaborative web application, lies in the insufficient verification of the authenticity of executed requests. This allows attackers to replace the displayed URLs with fake ones.
The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a malicious actor to substitute the displayed URL with another one...
Mozilla Firefox Input Validation Error Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an input validation error vulnerability that stems from the fact that QR Code Scanner does not display a user-confirmed URL before opening a website, potentially directing...
OESA-2024-1121 jruby security update
JRuby is a 100% Java implementation of the Ruby programming language. It is Ruby for the JVM. JRuby provides a complete set of core "builtin" classes and syntax for the Ruby language, as well as most of the Ruby Standard Libraries. Security Fixes: A ReDoS issue was discovered in the Time componen...
CVE-2024-23033
Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
PT-2024-19996 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.12 Description: A malicious URL can be used to execute XSS on reports pages. This issue affects GLPI, a Free Asset and IT Management Software package. Recommendations: For versions prior to 10.0.12, upgrade to...
LyLme Spage Code Issue Vulnerability
LyLme Spage six zero navigation page is China's six zero LyLme open source a navigation page . Committed to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitate the most valuable links , no commercial...