AShop - Open Redirection Cross-Site Scripting

AShop - Open Redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/50616/info AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execu...

CVE-2010-4900

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2010-4900

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2010-4900

CVE-2010-4900 is an open redirect vulnerability in CMS WebManager-Pro prior to or including version 8.1, exploitable via a URL supplied in the url parameter of c.php. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing-style redirection. The connec...

Opera Mobile 11.1 Cross Application Scripting

1 Background ============= Android applications are executed in a sandbox environment, to ensure that no application can access sensitive information held by another, without adequate privileges. For example, Opera Mobile holds sensitive information such as cookies, cache and history, and this...

Microsoft SharePoint 2007/2010 - 'Source' Multiple Open Redirections

source: https://www.securityfocus.com/bid/49620/info Microsoft SharePoint is prone to multiple URI open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. Successful exploits may redirect a user to a potentially malicious site; this may aid in...

Microsoft SharePoint 20072010 - Source Multiple Open Redirections

Microsoft SharePoint 20072010 - Source Multiple Open Redirections source: https://www.securityfocus.com/bid/49620/info Microsoft SharePoint is prone to multiple URI open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. Successful exploits may...

Fraudulent Digital Certificates Spoofing Vulnerability (2607712)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2641690 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Fraudulent DigiNotar Certificates HTTPS Spoofing

A security breach had been reported at DigiNotar, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Several of DigiNotar's digital certificates had been signed on behalf of a third party, without sufficiently...

20 Major Sites Cross Site Scripting

Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users. Examples of such co...

20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack

20 Famous websites vulnerable to Cross Site Scripting XSS Attack Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web...

The Social-Engineer Toolkit v2.0 Released

The Social-Engineer Toolkit v2.0 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

The Social-Engineer Toolkit v2.0 Released

The Social-Engineer Toolkit v2.0 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

Sitecore CMS 6.4.1 - 'url' Open Redirection

source: https://www.securityfocus.com/bid/48930/info Sitecore CMS is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits may redirect a user to a potentially malicious site; this may aid in phishing attacks. Sitecore...

MBoard 1.3 - 'url' Open Redirection

source: https://www.securityfocus.com/bid/48902/info MBoard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. MBoard 1.3 is vulnerable; other versions ma...

IBM WebSphere Application Multiple Vulnerabilities Jul-11

The host is running IBM WebSphere Application Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmwasmultiplevulnjul11.nasl 7019 2017-08-29 11:51:27Z teissa $ IBM WebSphere Application Multiple Vulnerabilities Jul-11 Authors: Antu sanadi Copyright: Copyright ...

Open redirect

Open redirect vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter...

CVE-2011-1355

CVE-2011-1355 affects IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19. The vulnerability is an open redirect via the logoutExitPage parameter, allowing remote attackers to redirect users to arbitrary sites and potentially enable phishing. Multiple connected sour...

Fraudulent Digital Certificates Spoofing Vulnerability (2524375)

The host is installed with Microsoft Windows operating system and is prone to spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowsfraudulentdigitalcertspoofingvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Fraudulent Digital Certificates Spoofing Vulnerability 2524375 Authors: Antu Sana...

Fraudulent Digital Certificates Spoofing Vulnerability (2524375)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2641690 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...