Microsoft365_devicePhish

Microsoft365devicePhish Злоупотребление потоком авторизации OAuth Microsoft 365 для фишинговой атаки Это простой proof-of-concept скрипт, который позволяет атакующему провести фишинговую атаку на поток авторизации OAuth Microsoft 365. С его помощью можно подключиться к конечным точкам OAuth API...

Stable Diffusion Webui 1.10.0 - Open Redirect

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-11044...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing Модуль аутентификации в Blackboard Learn уязвим для подмены HTTP-заголовка Host при проверке сервисного билета Central Authentication Service CAS. Сервисный билет CAS предназначен только для конкретного сервиса , но Blackboard Learn не проверяет...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ 피싱, OTP/이메일 폭탄, 가짜 메일 등을 자동화하는 강력한 소셜 엔지니어링 툴킷입니다 — @karthithehacker가 ❤️로 제작했습니다. ⚠️ 교육 목적으로만 사용하세요. 명시적인 허가 없이 누구에게도 이 도구를 사용하지 마십시오. 📌 기능 🎯 피싱 공격 – 자격 증명을 탈취하기 위한 가짜 로그인 페이지 시뮬레이션 🔢 OTP 폭탄 – 대상 번호에 OTP 요청 플러드 📩 이메일 폭탄 – 받은 편지함을 마비시키기 위한 대량 이메일 전송 📧 가짜 이메일 보내기 – 사용자 지정 스푸핑...

CVE-2019-12949

CVE-2019-12949 pfSense 2.4.4-p2 및 2.4.4-p3에서 크로스 사이트 스크립팅 취약점을 통한 원격 코드 실행까지 정보 설명: pfSense 2.4.4-p2 및 2.4.4-p3에서, 인증된 관리자를 속여 피싱 페이지의 버튼을 클릭하게 할 수 있다면, 공격자는 dingcommand.php와 rrdfetchjson.php를 통해 서버에 임의의 실행 코드를 업로드할 수 있습니다. 그런 다음 원격 공격자는 해당 서버에서 루트 권한으로 모든 명령을 실행할 수 있습니다. 연구자: The Tarantula Team의...

CVE-2026-13277 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web si...

CVE-2026-13277

The IBM Verify Identity Access and IBM Security Verify Access products are vulnerable to an open redirect attack . A remote attacker can exploit this by persuading a victim to visit a specially crafted website, allowing them to spoof the URL and redirect the user to a malicious site that appears ...

CVE-2026-13277 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web si...

EUVD-2026-78067

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability t...

CVE-2026-15412 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability t...

EUVD-2026-75014

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-79964

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-79952

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Output vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to launch of...

CVE-2026-79952

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Output vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to launch of...

PT-2026-88973

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Output vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to launch of...

PT-2026-88975

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

EUVD-2026-70328

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

PT-2026-84920

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-18058: Missing Authorization

The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system...

CVE-2026-80200 Kimai before 2.53.0 Open Redirect via RelayState

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to...