PT-2023-7820 · Beckhoff · Authelia-Bhf +1

Name of the Vulnerable Software and Affected Versions: Beckhoff TwinCAT/BSD affected versions not specified Description: The package authelia-bhf included in Beckhoff's TwinCAT/BSD is prone to an open redirect, allowing a remote unprivileged attacker to redirect a user to another site. This may...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

Franklin Electric Franklin Fueling Systems Security Breach

Franklin Electric Franklin Fueling Systems is a fueling system from Franklin Electric in the United States. A security vulnerability exists in Franklin Electric Franklin Fueling Systems version 1.6.24.492, which stems from vulnerability to open redirection attacks. An attacker could exploit the...

CVE-2023-45202

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-41609

An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...

CVE-2023-38574

Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

Open Redirect Vulnerability in jupyter-server

Impact Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. Patches Upgrade to Jupyter Server 2.7.2 Workaround...

DEBIAN-CVE-2023-39968

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URL...

PYSEC-2023-155

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URL...

PYSEC-2023-155

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URL...

CVE-2023-39968

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URL...

CVE-2023-39968 Open Redirect Vulnerability in jupyter-server

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URL...

Jupyter Server 输入验证错误漏洞

Jupyter Server is an application used by the Jupyter organization to provide back-end services for Jupyter Web applications. An input validation error vulnerability exists in versions of Jupyter Server prior to 2.7.2, which stems from the presence of an open redirection vulnerability that could...

CVE-2023-40530

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...

"Skylark" App fails to restrict custom URL schemes properly

Overview "Skylark" App provided by SKYLARK HOLDINGS CO., LTD. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939, CVE-2023-40530, CVE-2024-54014 which may be exploited to direct the App to access any sites...

Deciso OPNsense Input Validation Error Vulnerability

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. An input validation error vulnerability exists in versions prior to OPNsense 23.7, which stems from an open redirect on the Login page that allows an attacker to redirect a victim to a...

CVE-2022-43950

A URL redirection to untrusted site 'Open Redirect' vulnerability CWE-601 in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the redirection of URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...