U.S. Dept Of Defense: Reflected XSS in ██████

A reflected XSS vulnerability was found on one of the subdomains of a system. The vulnerability was located in the emailbody parameter of the PreviewLetterhead.aspx page. An attacker could exploit this vulnerability to execute malicious scripts and steal user's cookies, launch phishing attacks, a...

CVE-2022-33146

CVE-2022-33146 describes an open redirect vulnerability in web2py versions prior to 2.22.5. The issue allows a remote attacker to redirect a user to an arbitrary site and facilitate phishing by triggering a specially crafted URL. Affected software is web2py (versions