EUVD-2025-202927

SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 e.g., on Mini1prod2 allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation,...

CVE-2024-52270

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

CVE-2024-52270

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

CVE-2024-52270 PDF Document Spoofing in DropBox Sign(HelloSign)

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

DropBox Sign 安全漏洞

DropBox Sign DropBox HelloSign is a DropBox company that sends, receives and manages legally binding electronic signatures. A security vulnerability exists in DropBox Sign versions 2024-12-04 and earlier that stems from a misrepresentation of a user interface critical information vulnerability th...

CVE-2024-12147

creationtimestamp| type| source ---|---|--- 2024-12-04 20:06:45+00:00| seen| https://t.me/cvedetector/12025...

CVE-2024-12056

creationtimestamp| type| source ---|---|--- 2024-12-04 16:45:47+00:00| seen| https://t.me/cvedetector/12009...

CVE-2024-40745

creationtimestamp| type| source ---|---|--- 2024-12-04 16:45:46+00:00| seen| https://t.me/cvedetector/12008...

PT-2024-35146 · Docusign · Docusign

Name of the Vulnerable Software and Affected Versions: DocuSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, which allows Content Spoofing. This means that the displayed version of a document does not...