CVE-2011-4951

CVE-2011-4951 describes an open redirect vulnerability in the file path phpgwapi/ntlm/index.php used by EGroupware’s EPL before 11.1.20110804-1 and Community Edition before 1.8.001.20110805. According to the sources, an attacker can pass a URL in the forward parameter to redirect victims to arbit...

JVN#69880570: Opera address bar spoofing vulnerability

Opera contains a vulnerability where certain characters may be displayed in the address bar, causing 2 URLs to potentially be indistinguishable from each other. Impact Phishing attacks may be possible, due to the difficulty in determining that the URL displayed in the address bar and the URL bein...

Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)

The host is installed with Microsoft Windows operating system and is prone to digital certificate key length spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmscertificatekeylengthspoofingvuln.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Minimum Certificate Key Length Spoofing...

Lsoft ListServ 16 Cross Site Scripting

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2012-001 - Original release date: August 16, 2012 - Discovered by: Jose Carlos de Arriba Penetration Testing Team Lead at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade...

Opera Multiple Vulnerabilities (Aug 2012) - Mac OS X

Opera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnaug12macosx.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera Multiple Vulnerabilities - August12 Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbone Networks...

U.S. Still Tops at Hosting Phishing Sites

There are a lot of things that the United States is no longer so good at doing: eating vegetables or winning major marathons, for example. But one thing that the U.S. still does really well is provide comfortable hosting platforms for phishing sites. In fact, about 60 percent of all phishing site...

Mandriva Update for mozilla MDVSA-2012:110-1 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:110-1 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120424)

Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in Sanitiser for OpenType OTS, used by Thunderbird to help prevent potential exploits in malformed OpenType fonts. Malicious content could cause Thunderbird to crash or, under certain conditions, possibly execute...

ocPortal 7.1.5 - redirect Open Redirection

ocPortal 7.1.5 - redirect Open Redirection source: https://www.securityfocus.com/bid/54715/info ocPortal is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...

CVE-2012-3693

Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...

Design/Logic Flaw

Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...

CVE-2012-3693

Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8226)

MozillaFirefox have been updated to the 10.0.6ESR security release fixing various bugs and several security issues, some critical. The ollowing security issues have been fixed : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other...

Open redirect

Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL...

Maian Survey - '/index.php' URI redirection / Local File Inclusion

source: https://www.securityfocus.com/bid/54613/info Maian Survey is prone to a URI-redirection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to execute arbitrary local files within...

Maian Survey - index.php URI redirection Local File Inclusion

Maian Survey - index.php URI redirection Local File Inclusion source: https://www.securityfocus.com/bid/54613/info Maian Survey is prone to a URI-redirection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit...

Ubuntu Update for thunderbird USN-1510-1

Ubuntu Update for Linux kernel vulnerabilities USN-1510-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15101.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for thunderbird USN-1510-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for firefox USN-1509-1

Ubuntu Update for Linux kernel vulnerabilities USN-1509-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15091.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for firefox USN-1509-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1509-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...