PT-2020-19837

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2019.1.5 Description The issue concerns reverse tabnabbing, which was possible on several pages. This means that an attacker could potentially manipulate the browser's behavior by opening a new tab with a...

Simple Machines Forum (SMF) < 2.0.16 Reverse Tabnabbing Vulnerability

Simple Machine Forum SMF is prone to a reverse tabnabbing vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-12490

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

CVE-2019-12490

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

Code injection

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

CVE-2019-12490

SMF contains a reverse tabnabbing flaw (CVE-2019-12490) in which external links opened with _blank can enable credential theft when a user visits a crafted site. Affected: Simple Machines Forum before 2.0.16. Root cause: improper handling of external links (target="_blank"). Impact documented as ...

CVE-2019-12490

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

CVE-2019-12490: Undefined Security Weakness

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

PT-2020-9328

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum versions prior to 2.0.16 Description: An issue in Simple Machines Forum allows reverse tabnabbing to occur due to the use of blank for external links. Recommendations: For versions prior to 2.0.16, update to version 2.0....

Reverse Tabnabbing

showdown is vulnerable to reverse tabnabbing. The vulnerability exists due to a misconfiguration whereby the setting of rel="noopener noreferrer" is not set when openLinksInNewWindow is on...

Reverse Tabnabbing

Overview Versions of showdown prior to 1.9.1 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation Upgrade to version 1.9...

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

Design/Logic Flaw

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2019-18365

CVE-2019-18365 affects JetBrains TeamCity prior to 2019.1.4. The connected documents describe a reverse tabnabbing issue on several pages, enabling tabnabbing/phishing-style risk when users follow links. Public details confirm the vulnerability description but do not disclose exploit code or prac...

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2019-18365: Improper Privilege Management

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

PT-2019-15374

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2019.1.4 Description The issue allows for reverse tabnabbing on several pages, which can be exploited. Recommendations For versions prior to 2019.1.4, update to version 2019.1.4 or later to resolve the issu...

Reverse Tabnabbing

Overview Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently...

Security Bulletin: IBM Maximo Asset Management is vulnerable to Reverse Tabnabbing (CVE-2018-2028)

Summary IBM Maximo Asset Management could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. Vulnerability Details CVEID: CVE-2018-2028 DESCRIPTION: IBM Maximo Asset Management could allow a an...