Design/Logic Flaw

tiki-featuredlink.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."...

CVE-2012-5321

tiki-featuredlink.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."...

CVE-2012-5234

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

Open redirect

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

CVE-2012-5234

Open redirect in ocPortal’s index.php (vulnerable before 7.1.6) allows remote attackers to redirect users to arbitrary sites via the redirect parameter, enabling phishing scenarios. Affected software: ocPortal before 7.1.6. Root cause: improper handling of the redirect parameter leading to open r...

CVE-2012-5234

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

SSL Digital Certificate Security Issues Put CAs on Notice

It’s been a rough couple of years for the security of fundamental Internet infrastructure technologies such the domain name system DNS, SSL and digital certificates. Hackers are taking aim at these core technologies at the heart of ecommerce and online communication, and are more often than not,...

CVE-2012-2062

Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-2062

CVE-2012-2062 refers to an open redirect vulnerability in the Drupal module Redirecting click bouncer . The connected Drupal advisory confirms the root cause: the module does not validate or constrain the URL to redirect to, enabling an open redirect that could be abused for phishing or user redi...

Mandriva Linux Security Advisory : mozilla (MDVSA-2012:110-1)

Security issues were identified and fixed in mozilla firefox and thunderbird : Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

Open redirect

Open redirect vulnerability in views/authforms.py in OpenStack Dashboard Horizon Essex 2012.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by...

CVE-2012-3540

The CVE-2012-3540 issue is an open redirect flaw in OpenStack Horizon Essex (2012.1) affecting the login flow. The vulnerability occurs in views/auth_forms.py (auth/login/) where a next parameter can redirect victims to arbitrary sites, enabling phishing after login. Affected Horizon versions req...

CVE-2012-3540

Open redirect vulnerability in views/authforms.py in OpenStack Dashboard Horizon Essex 2012.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by...

Opera Address Bar Spoofing Vulnerability - Windows

Opera is prone to address bar spoofing vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4951

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

CVE-2011-4951

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

CVE-2011-4951

CVE-2011-4951 describes an open redirect vulnerability in the file path phpgwapi/ntlm/index.php used by EGroupware’s EPL before 11.1.20110804-1 and Community Edition before 1.8.001.20110805. According to the sources, an attacker can pass a URL in the forward parameter to redirect victims to arbit...

JVN#69880570: Opera address bar spoofing vulnerability

Opera contains a vulnerability where certain characters may be displayed in the address bar, causing 2 URLs to potentially be indistinguishable from each other. Impact Phishing attacks may be possible, due to the difficulty in determining that the URL displayed in the address bar and the URL bein...

Microsoft Windows Minimum Certificate Key Length Spoofing Vulnerability (2661254)

The host is installed with Microsoft Windows operating system and is prone to digital certificate key length spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmscertificatekeylengthspoofingvuln.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Minimum Certificate Key Length Spoofing...