CVE-2010-4900

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2010-4900

CVE-2010-4900 is an open redirect vulnerability in CMS WebManager-Pro prior to or including version 8.1, exploitable via a URL supplied in the url parameter of c.php. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing-style redirection. The connec...

Opera Mobile 11.1 Cross Application Scripting

1 Background ============= Android applications are executed in a sandbox environment, to ensure that no application can access sensitive information held by another, without adequate privileges. For example, Opera Mobile holds sensitive information such as cookies, cache and history, and this...

Microsoft SharePoint 20072010 - Source Multiple Open Redirections

Microsoft SharePoint 20072010 - Source Multiple Open Redirections source: https://www.securityfocus.com/bid/49620/info Microsoft SharePoint is prone to multiple URI open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. Successful exploits may...

Microsoft SharePoint 2007/2010 - 'Source' Multiple Open Redirections

source: https://www.securityfocus.com/bid/49620/info Microsoft SharePoint is prone to multiple URI open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. Successful exploits may redirect a user to a potentially malicious site; this may aid in...

Fraudulent Digital Certificates Spoofing Vulnerability (2607712)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2641690 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

20 Major Sites Cross Site Scripting

Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users. Examples of such co...

Fraudulent DigiNotar Certificates HTTPS Spoofing

A security breach had been reported at DigiNotar, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Several of DigiNotar's digital certificates had been signed on behalf of a third party, without sufficiently...

20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack

20 Famous websites vulnerable to Cross Site Scripting XSS Attack Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web...

The Social-Engineer Toolkit v2.0 Released

The Social-Engineer Toolkit v2.0 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

The Social-Engineer Toolkit v2.0 Released

The Social-Engineer Toolkit v2.0 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

Sitecore CMS 6.4.1 - 'url' Open Redirection

source: https://www.securityfocus.com/bid/48930/info Sitecore CMS is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits may redirect a user to a potentially malicious site; this may aid in phishing attacks. Sitecore...

IBM WebSphere Application Multiple Vulnerabilities Jul-11

The host is running IBM WebSphere Application Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmwasmultiplevulnjul11.nasl 7019 2017-08-29 11:51:27Z teissa $ IBM WebSphere Application Multiple Vulnerabilities Jul-11 Authors: Antu sanadi Copyright: Copyright ...

MBoard 1.3 - 'url' Open Redirection

source: https://www.securityfocus.com/bid/48902/info MBoard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. MBoard 1.3 is vulnerable; other versions ma...

Open redirect

Open redirect vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter...

CVE-2011-1355

CVE-2011-1355 affects IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19. The vulnerability is an open redirect via the logoutExitPage parameter, allowing remote attackers to redirect users to arbitrary sites and potentially enable phishing. Multiple connected sour...

Fraudulent Digital Certificates Spoofing Vulnerability (2524375)

The host is installed with Microsoft Windows operating system and is prone to spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowsfraudulentdigitalcertspoofingvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Fraudulent Digital Certificates Spoofing Vulnerability 2524375 Authors: Antu Sana...

Fraudulent Digital Certificates Spoofing Vulnerability (2524375)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2641690 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Google Removes .CO.CC Subdomains Over Phishing, Spam Concerns

In a rare and sweeping move, Google has removed all of the sites hosted on .co.cc domains from its search results, saying that because such a large percentage of the sites on that freehosting provider are low-quality or spammy, they decided to de-index all of them. The .co.cc domain is well-known...

Open Redirect Weakness in MBoard

High-Tech Bridge SA Security Research Lab has discovered weakness in MBoard which could be exploited to perform phishing attacks. 1 Open redirect weakness in MBoard The weakness exists due to insufficient validation of the input data in the "url" parameter in go.php when redirecting users to...