UBUNTU-CVE-2022-3381

An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect users to arbitrary sites...

CVE-2022-3381

An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect users to arbitrary sites...

web2py 输入验证错误漏洞

web2py is web2py open source a free and open source full stack enterprise framework. Used for agile development of secure database-driven Web-based applications . A security vulnerability exists in web2py versions prior to 2.23.1 that stems from the presence of an open redirection vulnerability,...

SUSE CVE-2009-2673

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

SUSE CVE-2014-1985

Open redirect vulnerability in the redirectbackordefault function in app/controllers/applicationcontroller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url backurl parameter...

pgAdmin 输入验证错误漏洞

pgAdmin is an open source administration and development platform for the open source database PostgreSQL. A security vulnerability exists in versions prior to pgAdmin 4 v6.14, which originates from when a specially crafted URL is accessed, the user may be redirected to an arbitrary website and t...

SHIRASAGI 输入验证错误漏洞

SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in SHIRASAGI v1.14.4 to v1.15.0, which can be exploited by attackers to redirect users to arbitrary websites and conduct phishing attacks...

CVE-2022-39021

U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website...

OpenAM 输入验证错误漏洞

OpenAM is an all-in-one access management solution organized by the OpenAM Consortium. It provides authentication, authorization, delegation and federation capabilities. A security vulnerability exists in OpenAM Consortium Edition version 14.0.0, which stems from the fact that when accessing the...

Bytedance TikTok 安全漏洞

Bytedance TikTok Jieyin International Version is an application for creating and sharing short videos by Chinese company Bytedance. A security vulnerability exists in TikTok versions prior to 23.8.4, which stems from a crafted URL unauthenticated deep link that can force com.zhiliaoapp.musically...

Caddy 输入验证错误漏洞

Caddy is an open source, cross-platform HTTP/Web server from Caddy Inc. A security vulnerability exists in Caddy version 2.4, which originates from an open redirection vulnerability. A remote attacker can exploit this vulnerability by tricking the victim user into clicking on a specially crafted...

GHSA-MQGF-4RW4-2CQ2 Jenkins affected by Open Redirect Vulnerability

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

CVE-2021-45226

An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites...

CVE-2021-22964

A redirect vulnerability in the fastify-static module version = 4.2.4 and 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e.A DOS vulnerability is possible if the...

Asken App for Android fails to restrict custom URL schemes properly

Overview Asken App for Android by asken Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Impact A remote attacker may lead a user to access ...

The vulnerability in the web interface of the Cisco Finesse automation software allows a hacker to redirect users to arbitrary websites and carry out phishing attacks.

The vulnerability in the web interface of the Cisco Finesse automation software for operators involves redirecting URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites and carry out phishing attacks...

Open redirect

Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbitrary sites and conduct phishing attacks via a specially crafted URL...

The vulnerability of the Ovirt virtual infrastructure management tool, related to the use of open redirection, allows a hacker to redirect users to any arbitrary website.

The vulnerability of the Ovirt virtual infrastructure management tool is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites using a specially created link...

ovirt-engine: Redirect to arbitrary URL allows for phishing

An Open redirect vulnerability was found in ovirt-engine versions 4.4.1 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer...

CVE-2019-6020

Open redirect vulnerability in PowerCMS 5.12 and earlier PowerCMS 5.x, 4.42 and earlier PowerCMS 4.x, and 3.293 and earlier PowerCMS 3.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...