267 matches found
CVE-2019-18365
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...
Design/Logic Flaw
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...
CVE-2019-18365
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...
CVE-2019-18365
CVE-2019-18365 affects JetBrains TeamCity prior to 2019.1.4. The connected documents describe a reverse tabnabbing issue on several pages, enabling tabnabbing/phishing-style risk when users follow links. Public details confirm the vulnerability description but do not disclose exploit code or prac...
Reverse Tabnabbing
Overview Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently...
Security Bulletin: IBM Maximo Asset Management is vulnerable to Reverse Tabnabbing (CVE-2018-2028)
Summary IBM Maximo Asset Management could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. Vulnerability Details CVEID: CVE-2018-2028 DESCRIPTION: IBM Maximo Asset Management could allow a an...
Wordpress Wisechat 2.6.3 Plugin - Reverse Tabnabbing Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user...
Wordpress Plugin Wisechat 2.6.3 - Reverse Tabnabbing
Wordpress Plugin Wisechat 2.6.3 - Reverse Tabnabbing Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user. Th...
WordPress Wise Chat plugin <= 2.6.3 - Reverse Tabnabbing vulnerability
Reverse Tabnabbing vulnerability found by MTK in WordPress Wise Chat plugin versions = 2.6.3. Solution Update the WordPress Wise Chat plugin to the latest available version at least 2.7...
WordPress Plugin Wisechat 2.6.3 - Reverse Tabnabbing
Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user. This opens in a new tab, and the parent tab is silently...
Reverse Tabnabbing
quill is vulnerable to reverse tabnabbing attacks. The vulnerability exists due to the lack of rel property set in the target attribute that is set to blank, allowing tabnabbing attacks...
Passit: Insecure opening of external links in app.passit.io/list allows for reverse tabnabbing
Description https://app.passit.io/list renders external links under attacker control that open in a new tab such that the opened tab has access to the opening tab where the user was just browsing on app.passit.io via window.opener. This is likely due to the lack of specifying a rel="noopener"...
Phabricator: Window.opener fix bypass
Description Due to a recent reporthttps://hackerone.com/reports/306414 a fix was deployed in order to resolve the tabnabbing issue. However by using a line break the fix can be bypassed. Steps to reproduce 1 Browse to your Phabricator instance and create a new document. 2 Now paste in the followi...
HackerOne: Reverse Tabnabbing Vulnerability in Outgoing Links
The external links in the reports are not properly handled, using the issue the links can access the openers and replace them with some other page. To Verify the issue, just go to any report which do have any external link and inspect the proceed button. Where the issue lies: rel="noreferrer"...
Infogram: Tabnabbing via window.opener
Hi Team, i would like to report tab nabbing issue on your domain. Details: When you open a link in a new tab target="blank" , the page that opens in a new tab can access the initial tab and change it's location using the window.opener property. PoC: 1.Navigate to...
Monero: TabNabbing issue (due to taget=_blank)
Hi team, i get to know in this particular url https://getmonero.org/get-started/what-is-monero/ and i found one 3rd party url. Issue lies Here : Here i can see you are using target=blank and no more rel tag. Here , target=blank means it will open in another new tab. but due to tabnabbing it can...
Legal Robot: TabNabbing issue (due to taget=_blank)
Hi team, i get to know in this particular url https://app.legalrobot-uat.com/dmca-safe-harbor and i found one 3rd party url. Issue lies Here : Electronic Frontier Foundation Here i can see you are using target=blank and no more rel tag. Here , target=blank means it will open in another new tab. b...
FreeBSD : gitlab -- Various security issues (5d62950f-3bb5-11e7-93f7-d43d7e971a1b)
GitLab reports : Information Disclosure in Issue and Merge Request Trackers During an internal code review a critical vulnerability in the GitLab Issue and Merge Request trackers was discovered. This vulnerability could allow a user with access to assign ownership of an issue or merge request to...
Instacart: Reverse Tab-nabbing at www.instacart.com/store/partner_recipe?recipe_url=
Summary Instacart at /store/partnerrecipe?recipeurl= endpoint is vulnerable to reverse tabnabbing, since the injected link use target="blank" , this means the page that opens in a new tab can access the initial tab and change its location using the window.opener property. example: Reproduction...
Pawn Storm – A Look Into this Cyberespionage Actor Group
In April 2017 my monthly threat webinar focused on a cyberespionage group our Forward-Looking Threat Researcher, Feike Hacquebord, has been following for many years and recently published a report into the most recent two years of activities. In this post I want to focus on their tools and tactic...