Lucene search
K

21 matches found

Nuclei
Nuclei
added 16 hours ago12 views

WP Content Copy Protection & No Right Click - Open Redirect

The WP Content Copy Protection & No Right Click plugin before version 15.3 contains an open-redirect vulnerability via the referrer parameter in no-js.php, allowing redirection of users to external sites. id: CVE-2024-6690 info: name: WP Content Copy Protection & No Right Click - Open Redirect...

6.1CVSS5.4AI score0.002EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:34 a.m.3 views

CVE-2019-7753

Verydows 2.0 has XSS via the index.php?m=api=stats=count referrer parameter...

6.1CVSS5.9AI score0.0024EPSS
Exploits1References1
VulnCheck KEV
VulnCheck KEV
added 2025/11/28 12:0 a.m.2 views

VulnCheck KEV: CVE-2024-6690

The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites...

6.1CVSS5.8AI score0.002EPSS
In wildExploits1References2
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.2 views

PT-2025-44186

Name of the Vulnerable Software and Affected Versions WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730 Description A stack-based buffer overflow exists in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730, and potentially other WAVLINK models. This allows attackers to...

9.1CVSS7.6AI score0.00166EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2009-1162

Malware in sbrugna...

4.3CVSS6.4AI score0.00516EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-17281

Malware in sbrugna...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References2
OSV
OSV
added 2025/05/15 8:15 p.m.2 views

CVE-2024-6690

The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites...

6.1CVSS5.8AI score0.002EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.1 views

WordPress plugin wccp-pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS6.1AI score0.002EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2024/09/09 4:5 p.m.3 views

keycloak-core: Open Redirect on Account page

An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referreruri parameters are made to trick a user to visit a malicious webpage. A trusted URL can trick users and automation into believing that the URL is safe, when, in fact, it...

6.1CVSS5.7AI score0.00367EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/09/09 12:0 a.m.1 views

Red Hat Keycloak 输入验证错误漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. Red Hat Keycloak suffers from an input validation error vulnerability that stems from the inclusion of an open redirection vulnerability. An...

6.1CVSS4.2AI score0.00367EPSS
Exploits0References6
Hacker One
Hacker One
added 2020/05/07 6:5 a.m.59 views

X (Formerly Twitter): XSS via referrer parameter

Description Hi, i would like to report an XSS via javascript scheme in https://www.twitterflightschool.com/student/award/ID?referer=, the payload e need just a click of user to be triggered because the link will be placed in a tag...

6.3AI score
Exploits0
OSV
OSV
added 2019/02/12 12:29 p.m.1 views

CVE-2019-7753

Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...

6.1CVSS6.3AI score
Exploits0References1
NVD
NVD
added 2019/02/12 12:29 p.m.6 views

CVE-2019-7753

Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...

6.1CVSS6.1AI score0.0024EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/02/12 12:0 p.m.9 views

CVE-2019-7753

Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...

6.1AI score0.0024EPSS
Exploits1References1
CVE
CVE
added 2019/02/12 12:0 p.m.36 views

CVE-2019-7753

The connected documents confirm CVE-2019-7753 applies to Verydows 2.0, with an XSS vulnerability exposed via the index.php?m=api&c=stats&a=count referrer parameter. Red Hat and NVD entries corroborate this issue, describing an input/referrer parameter that can inject scripts. No public exploit de...

6.1CVSS6AI score0.0024EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/09/06 6:29 p.m.1 views

DEBIAN-CVE-2018-1000671

sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...

6.1CVSS6.1AI score0.00624EPSS
Exploits0References1
Prion
Prion
added 2016/01/10 3:59 a.m.15 views

Open redirect

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter...

5.8CVSS7.1AI score0.00338EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2015/10/03 12:0 a.m.1 views

Web Reference Database Open Redirect Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. An open redirection vulnerability exists in the handling of the 'referrer' parameter of the Web Reference Database, which allows an attacker to...

5.8CVSS6.7AI score0.005EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2011/09/30 12:0 a.m.11 views

APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability

The host is running APC PowerChute Network Shutdown and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnsappletxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability Authors:...

6.6AI score
Exploits0References5
Cvelist
Cvelist
added 2009/06/05 3:25 p.m.11 views

CVE-2009-1162

Cross-site scripting XSS vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter...

5.7AI score0.00516EPSS
Exploits1References6
Rows per page
Query Builder