3182 matches found
CVE-2016-0928
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry PCF Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2016-0928
The CVE pertains to Pivotal Cloud Foundry Elastic Runtime (PCF) with open redirect vulnerabilities in versions prior to 1.6.30 and 1.7.x before 1.7.8 . The underlying issue is open redirect flaws that allow remote attackers to redirect users to arbitrary external sites, enabling phishing when use...
Open redirect
Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka...
CVE-2016-3378
CVE-2016-3378 describes an Open Redirect vulnerability in Microsoft Exchange Server. Affected products include Microsoft Exchange Server 2013 SP1 and 2013 CU12/CU13, and 2016 CU1/CU2. The issue lets an attacker supply a crafted URL that redirects users to arbitrary external sites, enabling phishi...
CVE-2016-7137
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to 1...
The router is now a new vulnerability: hackers remotely hijacked Internet access-vulnerability warning-the black bar safety net
Recently, security experts found Inteno home router, there may be a security vulnerability. The vulnerability will lead to hackers can remote home router remotely hijacked and monitoring, and the router's firmware to transform into hack the homemade version, which completely take over the home...
IBM WebSphere Portal Open Redirect Vulnerability
IBM WebSphere Portal is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apache Ambari 1.7 - 2.1.1 Information Disclosure Vulnerability
Apache Ambari is prone to information disclosure and open redirection vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-5878
Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
Open redirect
Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2016-2989
Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
Researchers Go Inside a Business Email Compromise Scam
LAS VEGAS – Poor operational security on the part of Nigerian scammers running a Business Email Compromise BEC scheme has given researchers a window into their operations. Dell SecureWorks today published a report at Black Hat USA 2016 on what the criminals involved call wire-wire, or “waya-waya....
CVE-2016-3533
Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Search. NOTE: the previous information is from the July 2016 CPU. Oracle has not...
Moodle 2.6.x < 2.6.11 / 2.7.x < 2.7.8 Multiple Vulnerabilities
Binary data 9426.prm...
Seeking Alpha Mobile Financial App Forgoes Encryption
A popular mobile application that provides financial market research material operates without a measure of encryption, putting user information, including credentials and strategic financial interests at risk. The Seeking Alpha mobile app for Android and iOS also leaks everything from HTTP cooki...
BMW connected car storage 2 items could be used by hackers to steal the vehicle-vulnerability warning-the black bar safety net
According to the American automotive news website autoevolution reports, the BMW ConnectedDrive portal there are two“zero-day exploit”that could be used by hackers to control the multimedia device associated with the vehicle settings. ! BMW connected car storage 2 items could be used by hackers t...
CVE-2016-5304
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
Open redirect
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2016-5304
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...