CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

Code injection

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

CVE-2018-18496 is a clickjacking vulnerability in Mozilla Firefox’s feed preview page about:feeds. When the RSS Feed preview is framed in another page, scripted content can coerce a user into downloading and executing an executable from a temporary directory. It affects Firefox versions earlier t...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

AXIS Camera Unsecured Feed Detection

The remote host seems to be an Axis Network Camera. It was possible to access the camera feed remotely without supplying credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid122369; scriptversion"1.5"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"AXIS...

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system allows a hacker to inject arbitrary web scripts or HTML code.

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...

CVE-2019-6223

creationtimestamp| type| source ---|---|--- 2019-02-08 08:59:04+00:00| seen| https://t.me/ctinow/7951 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:24:57+00:00| seen|...

CVE-2019-7287

creationtimestamp| type| source ---|---|--- 2019-02-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=361 2019-02-08 16:50:09+00:00| exploited| https://t.me/alexmakus/2622 2019-02-08 16:55:16+00:00| exploited| https://t.me/antichat/3546 2020-10-09 14:38:27+00:00| seen|...

The vulnerability of the “chat feed” component of the automation software for interacting with Cisco SocialMiner customers allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability of the “chat feed” component of the Cisco SocialMiner automation software exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded by...

Instagram Feed <= 1.11.3 - Unspecified Issues

The Smash Balloon Social Photo Feed WordPress plugin was affected by an Unspecified Issues security vulnerability...

Cisco SocialMiner Cross-Site Scripting Vulnerability (CNVD-2019-02746)

Cisco SocialMiner is the United States Cisco Cisco a social media call center solution. The solution supports social media monitoring and analytics. A cross-site scripting vulnerability exists in the chat feed functionality of Cisco SocialMiner, which stems from the program's failure to adequatel...

Cross site scripting

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1668

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1668

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1668 Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1668

Cisco SocialMiner's Chat Feed contains XSS vulnerabilities due to insufficient sanitization of user-supplied input in chat feed HTTP requests. An unauthenticated, remote attacker could lure a user to click attacker-controlled content, enabling arbitrary script execution in the context of the affe...

Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. These vulnerabilities are due to insufficient sanitization of...

PT-2019-1300 · Cisco · Cisco Socialminer

Name of the Vulnerable Software and Affected Versions: Cisco SocialMiner affected versions not specified Description: A vulnerability in the chat feed feature could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface...