地图 / 钓鱼

钓鱼

Phishing · 其他弱点

其他弱点 / 钓鱼

41公开报告

—CWE 编号

0已标注发现方式

41关联报告

发现方式分布

暂无发现方式标注。

关联报告

URL link spoofingSlack · 2020-04-26 · 低危 · $250 · 362 票 Github Account hijack through broken link in developer.twitter.comX / xAI · 2021-02-04 · 中危 · 222 票 Subdomain Takeover on demo.greenhouse.io pointing to unbouncepagesGreenhouse.io · 2020-03-05 · 中危 · 76 票 Domain Takeover [3737signals.com]Basecamp · 2021-08-13 · 低危 · 48 票 Login CSRF : Login Authentication Flaw on https://liberapay.com/Liberapay · 2021-04-05 · 低危 · 46 票 account impersonate through broken linkQIWI · — · 未评级 · 39 票 Webview address bar spoofing in LINE client for iOSLY Corporation · 2021-09-15 · 低危 · 36 票 Lack warning label when receiving a letterHackerOne · 2021-05-13 · 低危 · 33 票 URL filter bypass in Enterprise GridSlack · 2020-02-14 · 低危 · $100 · 32 票 Stored XSS in api.icq.netMail.ru · — · 未评级 · $150 · 24 票 Twitter Source Label allow 'mongolian vowel separator' U+180E (app name)X / xAI · 2020-02-21 · 低危 · 19 票 Unclaimed Github Repository Takeover on https://www.data.gov/labsGSA Bounty · 2019-07-29 · 低危 · 19 票 ICQ for macOS: lack of `com.apple.quarantine` meta-attribute on downloaded files leads to GateKeeper/Quarantine bypass for downloaded executablesMail.ru · — · 未评级 · $150 · 18 票 Go.imgur.com can be used to phish for account informationImgur · 2018-09-21 · 低危 · 18 票 HTML Injection in Glassdoor job sharing emailsGlassdoor · — · 未评级 · 14 票 Address Bar Spoofing on TOR BrowserTor · 2023-01-02 · 中危 · 14 票 text injection and content spoofingOneWeb · — · 未评级 · 12 票 GitHub users outside of HackerOne organization can create and update Wiki pages of certain public HackerOne repositoriesHackerOne · 2018-12-12 · 低危 · 12 票 Impersonation of tiktok account via Broken Link in TikTok NewsroomTikTok · 2022-03-24 · 未评级 · 10 票 Content spoofing в http://my.mail.ru/cgi-bin/app/paymentmMail.ru · — · 未评级 · 10 票 Brave Shield for iOS is weak against IDN homograph attacksBrave Software · 2023-06-22 · 低危 · 9 票 Possible Domain Takeover on AWS Instance.Rocket.Chat · 2022-05-22 · 低危 · 9 票 Content SpoofingAcronis · 2020-08-12 · 低危 · 8 票 Content Spoofing or Text Injection support.mycrypto.comMyCrypto · 2018-04-18 · 低危 · 7 票 Targeted phishing attacks in Login flow v2Nextcloud · 2023-03-03 · 低危 · 6 票 Email SpoofingNextcloud · 2020-02-20 · 低危 · 6 票 Content injection on shared event (calendar.mail.ru)Mail.ru · — · 未评级 · 4 票 UI spoofing by showing sms:/tel: dialog on another websiteBrave Software · 2023-06-22 · 低危 · 3 票 Domian Takeover in [███████]U.S. Dept Of Defense · 2020-05-14 · 中危 · 3 票 Missing SPF RecordsAvito · 2020-08-19 · 低危 · 3 票 Subdomain Takeover on delivey.yelp.comYelp · 2022-11-12 · 低危 · 2 票 com.reddit.frontpage vulernable to Task Hijacking (aka StrandHogg Attack)Reddit · 2021-12-13 · 低危 · 2 票 Missing SPF record for the in scope domainMyCrypto · 2018-05-24 · 低危 · 2 票 Lack of validation before assigning custom domain names leading to abuse of GitLab pages serviceGitLab · 2018-02-01 · 低危 · 2 票 [warofdragons.com] Content SpoofingMail.ru · — · 未评级 · 2 票 [tanks.mail.ru] Content SpoofingMail.ru · — · 未评级 · 2 票 [s2.jugger.ru] Content SpoofingMail.ru · — · 未评级 · 2 票 Content SpoofingReddit · 2021-10-21 · 低危 · 1 票 npm packages that overlap with core node packagesNode.js third-party modules · 2018-06-16 · 中危 · 0 票 Limited arbitrary text inclusion in user invite emailsInflection · 2017-11-29 · 低危 · 0 票 Missing URL sanitization in comments can be leveraged for phishingDropbox · — · 未评级 · 0 票