EUVD-2024-55835

The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation constraints. This allows an attacker to provide a crafted URL that can redirect users to an arbitrary external domain. By leveraging this open redirection vulnerability, an...

Rudloff alltube prior to 3.0.1 - Open Redirect Detection

An open redirect vulnerability exists in Rudloff/alltube that could let an attacker construct a URL within the application that causes redirection to an arbitrary external domain via Packagist in versions prior to 3.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability...

CVE-2023-50704

EFACEC UC 500E is affected by CVE-2023-50704 (Open Redirect). Affected product: UC 500E (example 10.1.0); vulnerability arises when an attacker constructs a URL in the application that redirects to an arbitrary external domain, enabling phishing against users. Mitigation: EFACEC has released UC 5...

CVE-2020-17484: URL Redirection to Untrusted Site

An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain...

PT-2022-13364

Name of the Vulnerable Software and Affected Versions rudloff/alltube versions prior to 3.0.1 Description The issue allows an attacker to construct a URL that redirects to an arbitrary external domain. This is due to an open redirect vulnerability in releases prior to 3.0.1. Recommendations For...

Open Redirect in erudika/scoold

✍️ Description There is an open redirect vulnerability in the following URL: https://live.scoold.com/signin?returnto=https://google.com 🕵️‍♂️ Proof of Concept Step to reproduce 1. open above URL 2. login in the applicaiton 3. you redirect to google.com 💥 Impact That causes a redirection to an...

Kartpay: URl redirection

In the following post HTTP request while registering for merchant POST /register HTTP/1.1 Host: merchant.kartpay.com User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:67.0 Gecko/20100101 Firefox/67.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language:...