133 matches found
CVE-2024-2465
Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafted URL.This issue affects CDeX application versions through 5.7.1...
CVE-2024-2465
Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafted URL.This issue affects CDeX application versions through 5.7.1...
CVE-2024-2465 Open redirection in CDeX
Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafted URL.This issue affects CDeX application versions through 5.7.1...
Open Redirect
docassemblewebapp is vulnerable to open redirect. The vulnerability is due to inadequate validation or sanitization of user input in the redirect URL parameter, allowing malicious actors to create URLs that redirect users to arbitrary external websites...
The vulnerability of the Scalefusion MDM Agent, a software tool for managing endpoints, stems from deficiencies in access control. This allows attackers to open arbitrary websites.
The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to open arbitrary websites...
The vulnerability of the CMS system PowerCMS, related to the use of open redirection, allows attackers to redirect users to arbitrary websites.
The vulnerability of the CMS system PowerCMS is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites using a specially created URL address...
WordPress plugin T1 security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2023-8689 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: ScaleFusion version 10.5.2 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, allowing an attacker to open arbitrary websites. Specifically, a search can be made from a tooltip, which can be used to...
The vulnerability of the Registration Forms plugin in the WordPress content management system allows a hacker to redirect users to arbitrary websites.
The vulnerability of the Registration Forms plugin in the WordPress content management system involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to arbitrary websites...
Project Worlds Online Examination System Input Validation Error Vulnerability
Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...
The vulnerability of the user interface of the Plesk Obsidian hosting platform allows a hacker to redirect users to arbitrary websites.
The vulnerability of the Plesk Obsidian web hosting platform’s user interface involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites by sending a specially crafted “Host” header in HTTP requests...
Project Worlds Online Examination System Input Validation Error Vulnerability
Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...
e-Gov Client Application fails to restrict custom URL schemes properly
Overview e-Gov Client Application is installed, a Custom URL Scheme is configured on the system to enable invoking the product through a web browser. This custom URL contains the information about the website which the product should access, and a crafted URL may direct the application to access ...
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
T1 theme <= 19.0 - Open Redirect
Description The theme is vulnerable to unauthenticated open redirect with which any attacker and redirect users to arbitrary websites. PoC https://www.example.com/wp-content/themes/t1/page-templates/applyredirection.php?file=240317005410now=http://google.comjs=https://www.evil.com?...
Mattermost Desktop App 输入验证错误漏洞
Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App that originates from the program's inability to authenticate mattermost server redirects and navigate to arbitrary websites...
Fortinet FortiOS 输入验证错误漏洞
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...
Elastic Kibana 输入验证错误漏洞
Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A security vulnerability exists in Elastic Kibana. An attacker exploited the vulnerability to cause use...
WordPress WPtouch 3.7.5 Open Redirection
==================================================================================================================================== | Title : WordPress - WPtouch 3.7.5 Open Redirect Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
Lemon8 App fails to restrict access permissions
Overview Lemon8 by ByteDance K.K. provides the function to access a requested URL using Custom URL Scheme/DeepLink. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Ryo Sato of BroadBand Security,Inc. reported this...