CVE-2025-10044

CVE-2025-10044 affects Keycloak: error_description injection on error pages allows arbitrary text to be rendered in the UI, enabling phishing-like messages (e.g., fake support numbers/URLs) without XSS. The issue is mitigated by HTML encoding but still enables deceptive content within the trusted...

Security Bulletin: IBM MQ Appliance is affected by a UI message injection vulnerability (CVE-2018-1666)

Summary IBM MQ Appliance has addressed the following UI message injection vulnerability. Vulnerability Details CVEID: CVE-2018-1666 DESCRIPTION: IBM WebSphere DataPower Appliances could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. CVSS Base Score: 4....

Mail.ru: [warofdragons.com] Content Spoofing

It was possible to insert attacker controlled text into UI message on warofdragons.com. warofdragons.com is not covered by bug bounty scope...

Mail.ru: [tanks.mail.ru] Content Spoofing

It was possible to insert attacker controlled text into UI message on tanks.mail.ru. tanks.mail.ru is not covered by bug bounty scope...

Mail.ru: [s2.jugger.ru] Content Spoofing

It was possible to insert attacker controlled text into UI message on s2.jugger.ru. s2.jugger.ru is not covered by bug bounty scope...