Microsoft Edge browser vulnerability, which allows a hacker to access the browser’s history or retrieve other information

The vulnerability of Microsoft Edge is related to errors in the Referer policy processing. Exploiting this vulnerability can allow a malicious actor to gain access to the browser history or request other information through a specially crafted HTTPS website...

CVE-2015-2286

lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by reading a referer log after a victim navigates from this page to a...

CVE-2016-0125

Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."...

Information disclosure

Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."...

CVE-2016-0125

CVE-2016-0125 pertains to Microsoft Edge by mishandling the Referer policy, causing an information disclosure vulnerability that could expose a user’s request context or browsing history. Affected products include Microsoft Edge (and related IE components) with the root cause described as imprope...

CVE-2016-0125

Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."...

CVE-2015-3272

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...

UBUNTU-CVE-2015-3272

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...

CVE-2015-3272

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...

CVE-2015-3272

CVE-2015-3272 describes an open redirect vulnerability in Moodle’s lib/moodlelib.php: the clean_param function can be abused to redirect users to arbitrary sites via an HTTP Referer header that matches a local URL substring. Affected Moodle versions are up to 2.6.11, and 2.7.x before 2.7.9, 2.8.x...

http-vuln-cve2013-6786 NSE Script

Detects a URL redirection and reflected XSS vulnerability in Allegro RomPager Web server. The vulnerability has been assigned CVE-2013-6786. The check is general enough script tag injection via Referer header that some other software may be vulnerable in the same way. See also:...

CVE-2015-7929

eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

ClipperCMS 'Referer Check' Cross-Site Request Forgery Vulnerability

ClipperCMS is a content management system CMS. A cross-site request forgery vulnerability exists in ClipperCMS. A remote attacker could exploit this vulnerability to perform unauthorized actions and gain access to the affected application...

ClipperCMS 1.3.0 Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to public: 11/13/2015 Relea...

Design/Logic Flaw

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

HTTP GET Request Invalid 'Referer' Header Detection

Binary data 8998.prm...

HTTP GET Without 'Referer' Request Header Detection

Binary data 8997.prm...

HTTP 'Referer' Request Header Detection

Binary data 8999.prm...

HTTP GET Valid 'Referer' Request Header Detection

Binary data 9002.prm...

dedecms referer xss跨站

简要描述： dedecms 全版本！xss跨站一枚! referer构造触发！ 详细说明： 文件：/plus/vote.php code 区域 $ENVGOBACKURL = empty$SERVER'HTTPREFERER' ? '':$SERVER'HTTPREFERER'; ............................................ //判断是否允许被查看 $admin = new userLogin; if$dopost == 'view' if$row'view' == 1 && empty$admin-userName...