Buffer overflow

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2020-2538

CVE-2020-2538 affects Oracle WebCenter Sites (component: Advanced UI) in Oracle Fusion Middleware, with affected version 12.2.1.3.0. The vulnerability description indicates unauthenticated network access via HTTP, requiring user interaction, and potentially unauthorized data updates/deletes, read...

CVE-2020-2539

CVE-2020-2539 affects Oracle WebCenter Sites (Advanced UI) in Oracle Fusion Middleware, vulnerable in version 12.2.1.3.0. An unauthenticated attacker with network access via HTTP can compromise data, with successful attacks enabling unauthorized update/insert/delete and read access to WebCenter S...

Unspecified Vulnerability in Oracle WebCenter Sites (CNVD-2020-09676)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and more. WebCenter Sites is a Web experience management component that enables marketers and...

Unspecified Vulnerability in Oracle WebCenter Sites (CNVD-2020-09677)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and more. WebCenter Sites is a Web experience management component that enables marketers and...

Oracle WebCenter Sites Multiple Remote Security Vulnerabilities

Description Oracle WebCenter Sites is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Advanced UI' component is affected. These vulnerabilities affect the following supported versions: 12.2.1.3.0 Technologies Affected Oracle...

Oracle January 2020 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released advance notification regarding the January 2020 Critical Patch Update CPU to be released on January 14, 2020. The update addresses 333 vulnerabilities affecting the following software: Oracle Database Server, versions 12.2.0.1, 18c, 19c Oracle Communications Design...

Ian Dunn: Potential Open-Redirection

Steps To Reproduce: ===================== 1 visit : Normal Link. 2 Sign-in with your wordpress account and you will directed to This 3Change the value of the Parameter : redirectto .. To the attacker website let's say : https://vul-example.com 4NOTE THAT : you must URL-encode the vulnerable link...

CVE-2019-6035

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

CVE-2019-6020

Open redirect vulnerability in PowerCMS 5.12 and earlier PowerCMS 5.x, 4.42 and earlier PowerCMS 4.x, and 3.293 and earlier PowerCMS 3.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

Open redirect

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 7.1.3 and earlier Movable Type 7, Movable Type 6.5.0 and 6.5.1 Movable Type 6.5, Movable Type 6.3.9 and earlier Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x, Movable Type Advanced 7 r.4602 7.1.3 and earlier Movable Type 7, Movabl...

CVE-2019-6021

Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

Fake streaming sites using Star Wars as bait to spread malware

By Waqas If you are a Star Wars fan and use online streaming sites, this one is for you detailing how fake streaming sites are stealing card data. This is a post from HackRead.com Read the original post: Fake streaming sites using Star Wars as bait to spread malware...

DEBIAN-CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

CVE-2019-8670

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing...

The vulnerability of the S Pip content management system lies in the redirection of URLs to unreliable websites, allowing attackers to compromise data integrity.

The vulnerability of the Scribunto content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the data...

Red Hat Keycloak Open Redirect Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An open redirection vulnerability exists in Red Hat KeyCloak, which can be exploited by an attacker to redirect a user to an arbitrary Web site...

Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites

Attention WordPress users! Your website could easily get hacked if you are using "Ultimate Addons for Beaver Builder," or "Ultimate Addons for Elementor" and haven't recently updated them to the latest available versions. Security researchers have discovered a critical yet easy-to-exploit...

USN-4216-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code...

CORStest - A Simple CORS Misconfiguration Scanner

A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...