CVE-2017-18362

creationtimestamp| type| source ---|---|--- 2019-02-05 12:26:15+00:00| exploited| https://t.me/cibsecurity/2385 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:21+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971576 2025-02-23 02:10:15+00:00...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

The vulnerability of the IIoT Monitor monitoring platform lies in its improper control of external XML links, allowing attackers to inject incorrect documents into the output data.

The vulnerability of the IIoT Monitor platform is related to improper control of external XML links. Exploiting this vulnerability could allow a malicious actor to inject incorrect documents into the output data...

Hangzhou Hansun technology hansunCMS information leakage vulnerability

HansunCMS Hansun Technology cms is a portal content management system developed by Hangzhou Hansun Technology Co. Hangzhou Hansun Technology HansunCMS information leakage vulnerability, the vulnerability is due to the program in the background to leave the publicity of the external links caused b...

Passit: Insecure opening of external links in app.passit.io/list allows for reverse tabnabbing

Description https://app.passit.io/list renders external links under attacker control that open in a new tab such that the opened tab has access to the opening tab where the user was just browsing on app.passit.io via window.opener. This is likely due to the lack of specifying a rel="noopener"...

CVE-2017-17689

The S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. Mitigation The easiest way to mitigate this vulnerability is not to use HTML emails. If you really need to use them ensure that MUA clients disable...

WordPress No Follow All External Links plugin <=2.3.0 - Backdoored

Backdoor code found by WordFence in WordPress No Follow All External Links plugin versions =2.3.0. Solution This plugin was closed on 2017 December 19 and is no longer available for download on WordPress plugin repository. Deactivate and delete the plugin...

WP No External Links 4.2.1-4.2.2 - Backdoored

Even though one of the WP dev removed the malicious code and released version 4.3 https://plugins.trac.wordpress.org/browser/wp-noexternallinks?rev=1791413, the plugin is still closed for new installs...

community.boomi.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-455096 Description| Value ---|--- Affected Website:| community.boomi.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

WordPress wp-noexternallinks plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. wp-noexternallinks plugin is one of the link conversion plugin . A cross-site scripting vulnerability exists in...

Kanboard Design Vulnerability (CNVD-2017-30938)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

The vulnerability of Liebert SiteScan, a web-based system for controlling critical equipment, stems from an improper limitation on XML links to external objects. This allows a violator to access confidential information.

The vulnerability of the Liebert SiteScan web-based critical equipment monitoring system lies in improper restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information by using specially crafted XML requests...

Legal Robot: External links should be served in HTTPS.

Summary: This is just for the awareness to use HTTPS everywhere, even for outgoing links - where it's possible. Treat this report with some salt, not as in hashes. Navigate to: https://www.legalrobot.com/events/2017/06/12/ICAIL/ Some of the External Links on that Page redirects to HTTPS after...

Legal Robot: External links to be in HTTP

Hello Legal Robot Team On looking to 260591 report i saw on the main page https://www.legalrobot.com/ that some external links are not set to be in https On clicking in that links i get redirected on https. Check the attachment and see the other circled one also appears to be same issue. Thanks...

WordPress No External Links plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress No External Links plugin, which allows attackers to inject...

WordPress No External Links 3.5.17 Cross Site Scripting

DefenseCode ThunderScan SAST Advisory WordPress No External Links Plugin Security Vulnerability Advisory ID: DC-2017-01-022 Advisory Title: WordPress No External Links Plugin Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress No External Links Plugi...

WP No External Links <= 3.5.18 – Authenticated Cross-Site Scripting (XSS)

The wp-noexternallinks WordPress plugin was affected by security vulnerability. Cross-Site Scripting: Vulnerable Function: echo Vulnerable Variable: $REQUEST'date1', $REQUEST'date2' Vulnerable URLs:...

PT-2017-4096 · Aleksey Sanin +4 · Xmlsec +4

Name of the Vulnerable Software and Affected Versions: xmlsec versions 1.2.23 and earlier Description: The issue is related to the incorrect restriction of XML links to external objects in the xmlsec crypt library. This can allow a remote attacker to impact the confidentiality and availability of...

CVE-2017-0199: Microsoft Office RTF vulnerability using the PoC-vulnerability warning-the black bar safety net

0x01 description From FireFye detect and publish CVE-2017-0199 since, I have been researching this vulnerability in Microsoft officially released the patch, I decided to release this PoC. I use way possible with other researchers using different methods, the use of the method may be little bit...