Lucene search
K

9 matches found

Packet Storm
Packet Storm
added 2024/08/09 12:0 a.m.279 views

AccPack Cop 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : AccPack Cop v1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2024/07/30 12:0 a.m.242 views

SchoolPlus 1.0 Shell Upload

============================================================================================================================================= | Title : SchoolPlus v1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

7.4AI score
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:38 a.m.1 views

SUSE CVE-2021-39191

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of modauthopenidc was reported to ...

4.7CVSS6.3AI score0.00306EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2022/05/10 1:36 p.m.2 views

mod_auth_openidc: open redirect due to target_link_uri parameter not validated

A open redirect flaw was found in modauthopenidc where it does not sanitize targetlinkuri paramater properly. This issue could be used by a remote attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially...

6.1CVSS5.8AI score0.00306EPSS
Exploits1References5
Veracode
Veracode
added 2021/09/08 1:57 p.m.19 views

Open Redirect

libapache2-mod-auth-openidc is vulnerable to open redirect. An attacker is able to redirect a user by supplying a maliciously crafted URL in the targetlinkuri parameter...

6.1CVSS2.2AI score0.00306EPSS
Exploits1References10Affected Software2
OSV
OSV
added 2021/09/03 2:15 p.m.1 views

DEBIAN-CVE-2021-39191

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of modauthopenidc was reported to ...

6.1CVSS6.2AI score0.00306EPSS
Exploits1References1
OSV
OSV
added 2021/09/03 2:15 p.m.0 views

UBUNTU-CVE-2021-39191

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of modauthopenidc was reported to ...

6.1CVSS6.7AI score0.00306EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2021/09/03 12:0 a.m.1 views

PT-2021-22446 · Apache +5 · Apache Http Server +5

Name of the Vulnerable Software and Affected Versions: mod auth openidc versions prior to 2.4.9.4 Description: The mod auth openidc module for the Apache 2.x HTTP server is vulnerable to an open redirect attack. This occurs when a crafted URL is supplied in the target link uri parameter, affectin...

7.5CVSS6.2AI score0.01593EPSS
Exploits2References71
Drupal
Drupal
added 2019/08/14 12:0 a.m.1 views

External Links Filter - Moderately critical - Open Redirect Vulnerability - SA-CONTRIB-2019-063

The External Link Filter module provides an input filter that replaces external links by a local link that redirects to the target URL. The module did not have protection for the Redirect URL to go where content authors intended...

5.6AI score
Exploits0References8
Rows per page
Query Builder