21 matches found
WP Content Copy Protection & No Right Click - Open Redirect
The WP Content Copy Protection & No Right Click plugin before version 15.3 contains an open-redirect vulnerability via the referrer parameter in no-js.php, allowing redirection of users to external sites. id: CVE-2024-6690 info: name: WP Content Copy Protection & No Right Click - Open Redirect...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api=stats=count referrer parameter...
VulnCheck KEV: CVE-2024-6690
The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites...
PT-2025-44186
Name of the Vulnerable Software and Affected Versions WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730 Description A stack-based buffer overflow exists in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730, and potentially other WAVLINK models. This allows attackers to...
EUVD-2009-1162
Malware in sbrugna...
EUVD-2019-17281
Malware in sbrugna...
CVE-2024-6690
The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the referrer parameter, allowing redirection of users to external sites...
WordPress plugin wccp-pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
keycloak-core: Open Redirect on Account page
An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referreruri parameters are made to trick a user to visit a malicious webpage. A trusted URL can trick users and automation into believing that the URL is safe, when, in fact, it...
Red Hat Keycloak 输入验证错误漏洞
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. Red Hat Keycloak suffers from an input validation error vulnerability that stems from the inclusion of an open redirection vulnerability. An...
X (Formerly Twitter): XSS via referrer parameter
Description Hi, i would like to report an XSS via javascript scheme in https://www.twitterflightschool.com/student/award/ID?referer=, the payload e need just a click of user to be triggered because the link will be placed in a tag...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
The connected documents confirm CVE-2019-7753 applies to Verydows 2.0, with an XSS vulnerability exposed via the index.php?m=api&c=stats&a=count referrer parameter. Red Hat and NVD entries corroborate this issue, describing an input/referrer parameter that can inject scripts. No public exploit de...
DEBIAN-CVE-2018-1000671
sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's...
Open redirect
Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter...
Web Reference Database Open Redirect Vulnerability
Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. An open redirection vulnerability exists in the handling of the 'referrer' parameter of the Web Reference Database, which allows an attacker to...
APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability
The host is running APC PowerChute Network Shutdown and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnsappletxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability Authors:...
CVE-2009-1162
Cross-site scripting XSS vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter...