LastPass Credential Leak From Previous Site Vulnerability

LastPass suffers from an issue where bypassing dopopupregister leaks credentials from the previous site. lastpass: bypassing dopopupregister leaks credentials from previous site I noticed that you can create a popup without calling dopopupregister by iframing popupfilltab.html i.e. via...

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

Design/Logic Flaw

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

CVE-2019-16371

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

CVE-2019-16371

CVE-2019-16371 affects LogMeIn LastPass prior to version 4.33.0. The issue arises from a vulnerability where a crafted website can bypass do_popupregister via clickjacking, enabling credential harvesting for accounts on previously visited sites. This is documented across multiple sources (NVD and...

CVE-2019-16371: Improper Restriction of Rendered UI Layers or Frames

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because dopopupregister can be bypassed via clickjacking...

LimeSurvey < 3.17.14 Multiple Vulnerabilities

LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LastPass Credential Leak From Previous Site

lastpass: bypassing dopopupregister leaks credentials from previous site I noticed that you can create a popup without calling dopopupregister by iframing popupfilltab.html i.e. via moz-extension, ms-browser-extension, chrome-extension, etc. It's a valid webaccessibleresource. Because...

Limesurvey Clickjacking Vulnerability

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A clickjacking vulnerability exists in Limesurvey versions prior to 3.17.14. No detailed vulnerability details are provided at this time...

CVE-2019-16175

A clickjacking vulnerability was found in Limesurvey before 3.17.14...

CVE-2019-16175

A clickjacking vulnerability was found in Limesurvey before 3.17.14...

Security feature bypass

A clickjacking vulnerability was found in Limesurvey before 3.17.14...

CVE-2019-16175

A clickjacking vulnerability was found in Limesurvey before 3.17.14...

CVE-2019-16175

LimeSurvey before version 3.17.14 is affected by a clickjacking vulnerability. The CVSSv3.1 base score is 4.3 (Medium) with network attack vector, low attack complexity, requiring user interaction, and no confidentiality or availability impact. Affected product: LimeSurvey; vulnerable component/f...

CVE-2019-16175: Improper Restriction of Rendered UI Layers or Frames

A clickjacking vulnerability was found in Limesurvey before 3.17.14...

Palo Alto Software: Clickjacking

Summary Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of the...

DASAN Zhone ZNID GPON 2426A EU - Multiple Cross-Site Scripting Vulnerabilities

Exploit for hardware platform in category web applications Multiple Cross-Site Scripting XSS in the web interface of DASAN Zhone ZNID GPON 2426A EU version S3.1.285 application allows a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameters. Exploit Titl...

DASAN Zhone ZNID GPON 2426A EU - Multiple Cross-Site Scripting

DASAN Zhone ZNID GPON 2426A EU - Multiple Cross-Site Scripting Multiple Cross-Site Scripting XSS in the web interface of DASAN Zhone ZNID GPON 2426A EU version S3.1.285 application allows a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameters. Exploit...

Clickjacking Vulnerability in Schneider Electric Modicon M340 PLCs

Schneider Electric Modicon M340 is a medium-sized PLC from Schneider Electric, which has a wide range of applications in the industrial control field in China. A clickjacking vulnerability exists in the Schneider Electric Modicon M340 PLC. An attacker could tamper with a user's password by...