Open Redirection

Cloudfoundry UAA is vulnerable to open redirection.The redirect URI is not properly validated to filter wildcard characters, allowing a remote unauthenticated user to enter malicious URI to get a UAA access code...

Ubisoft Uplay Desktop Client 63.0.5699.0 - Remote Code Execution Exploit

Exploit Title: Ubisoft Uplay Desktop Client 63.0.5699.0 - Remote Code Execution Exploit Author: Che-Chun Kuo Vulnerability Type: URI Parsing Command Injection Vendor Homepage: https://www.ubisoft.com/en-us/ Software Link: https://uplay.ubi.com/ Version: 63.0.5699.0 Tested on: Windows, Microsoft...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2018-17155)

IBM InfoSphere Information Server is the information integration platform. A cross-site request forgery vulnerability exists in the IBM InfoSphere Information Server component, which allows remote attackers to exploit the vulnerability to construct malicious URIs, bait a request, and can be used ...

HelpDEZk Cross-Site Request Forgery Vulnerability

HelpDEZk is a suite of PHP-based software for managing requests, events. A cross-site request forgery vulnerability exists in admin/home/person/ in HelpDEZk. It allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to perform malicious actions an...

I-O DATA DEVICE ETX-R Cross-Site Request Forgery Vulnerability

The I-O DATA DEVICE ETX-R is a router product from I-O DATA DEVICE Japan. The I-O DATA DEVICE ETX-R suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of...

EClinicalWorks Population Health Client Portal Cross-Site Request Forgery Vulnerability

EClinicalWorks Population Health is a suite of population health solutions from EClinicalWorks, Inc. that provides dashboard analytics, patient appointment scheduling, care planning, and a secure network for patient referrals, among other features.Client Portal is one of these portals. A cross-si...

HP StoreOnce Backup System Cross-Site Request Forgery Vulnerability

HP StoreOnce Backup System is a disk-based backup system. A cross-site request forgery vulnerability exists in HP StoreOnce Backup System, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

IBM OpenPages GRC Platform Cross-Site Request Forgery Vulnerability

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site request forgery vulnerability exists in IBM OpenPages GRC Platform that allows a remote attacker to construct a malicious URI, trick a user into...

Cisco TelePresence Server Software Cross-Site Request Forgery Vulnerability

Cisco TelePresence Server Software is a videoconferencing solution known as a "telepresence" system. A cross-site request forgery vulnerability exists in Cisco TelePresence Server Software that could allow a remote attacker to construct a malicious URI, trick a user into resolving it, and perform...

Drupal OSF Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in the Drupal OSF module when the OSF Ontology and OSF Import modules are enabled in the program, which allows remote attackers to construct malicious URIs, trick users...

Securifi Almond Cross-Site Request Forgery Vulnerability

Securifi Almond is a wireless router product from Securifi. Securifi Almond uses a default password and suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context...

Orient Technologies Studio for OrientDB Server Community Edition Cross-Site Request Forgery Vulnerability

Orient Technologies Studio for OrientDB Server Community Edition is a community edition of OrientDB Server from Orient Technologies, UK. A cross-site request forgery vulnerability exists in Orient Technologies Studio for OrientDB Server Community Edition, which allows remote attackers to construc...

Cisco Prime Infrastructure Web Interface Cross-Site Request Forgery Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. A cross-site request forgery vulnerability exists in Cisco Prime Infrastructure that could...

Spina CMS 'spina/application_controller.rb' Cross-Site Request Forgery Vulnerability

Spina CMS is an open source content management system based on Rails development . Spina CMS suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Drupal Node Template Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP.Node Template is a module that uses the structure and data of nodes as a template. A cross-site request forgery vulnerability exists in the Drupal Node Template module that allows a remote attacker to construct a maliciou...

Cisco Headend Digital Broadband Delivery System Cross-Site Scripting Vulnerability

The Cisco Headend Digital Broadband Delivery System is a front-end broadband digital delivery system. A cross-site scripting vulnerability exists in the Cisco Headend Digital Broadband Delivery System. Because the program's WEB management interface fails to correctly filter user-submitted input, ...

Unspecified Cross-Site Scripting Vulnerability in IBM InfoSphere MDM Reference Data Management

IBM InfoSphere MDM Reference Data Management provides a range of capabilities essential for seamlessly managing reference data in the information world across different business domains, including comprehensive authoring and lifecycle management capabilities, a version control model, role-based...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Request Forgery Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A cross-site request forgery vulnerability exists in the McAfee Data Loss Prevention Endpoint DLPe epo extension, which allows remote attackers to construct malicious...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2015-01710)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. An input validation vulnerability exists in IBM Rational Quality Manager. The vulnerability allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain...

Landesk Management Suite 'serverlist_grouptree.aspx' Cross-Site Scripting Vulnerability

Landesk Management Suite is a system management solution. A cross-site scripting vulnerability exists in Landesk Management Suite 'serverlistgrouptree.aspx', which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to obtain a...