Lucene search
+L

1760 matches found

Kitploit
Kitploit
•added 2026/10/16 10:02 a.m.•26 views

ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser Address Bar Spoofing - iOS/iPadOS CVE-2024-25733 ARC Browser Address Bar Spoofing PoC - iOS/iPadOS Exploit PoC Proof of Concept function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443;...

6.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-106226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof...

4.2CVSS5.8AI score0.00225EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/06 7:18 p.m.•10 views

DEBIAN-CVE-2026-106317

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•11 views

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS0.00202EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/06 7:17 p.m.•10 views

DEBIAN-CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS5.9AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•12 views

CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS0.00225EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/06 7:17 p.m.•11 views

DEBIAN-CVE-2026-106209

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.9AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 6:41 p.m.•53 views

CVE-2026-106317

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

0.00198EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/06 6:41 p.m.•10 views

CVE-2026-106317

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

5.8AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/06 6:41 p.m.•93 views

CVE-2026-106317

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in FullScreen mode. A remote attacker can exploit this by serving a crafted HTML page to spoof the address bar . The Chromium security severity is rated as Low , and the issue is associated with ...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/06 6:41 p.m.•9 views

CVE-2026-106209

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00255EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/06 6:41 p.m.•92 views

CVE-2026-106209

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation issue (CWE-451). A remote attacker can leverage social engineering to spoof the address bar by tricking a user into visiting a crafted HTML page. This vulnerability allows for the display of misleading in...

5.4CVSS5.9AI score0.00255EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/10/06 6:41 p.m.•16 views

EUVD-2026-93734

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.9AI score0.00255EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/06 6:41 p.m.•10 views

EUVD-2026-93712

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00202EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/06 6:41 p.m.•10 views

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00202EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106226: Improper Input Validation

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS5.9AI score0.00225EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•21 views

Astra Linux – Vulnerability in WebKit2GTK

A inconsistent user interface issue has been resolved through improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, and macOS Sonoma 14.1. Visiting a malicious website may result in address bar spoofing...

7.5CVSS6.6AI score0.00853EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•10 views

Astra Linux – Vulnerability in Chromium

In the UI representation of FullScreen in Google Chrome before version 152.0.7977.75, it was possible for a remote attacker to spoof the address bar through a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00245EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•16 views

Astra Linux – Vulnerability in WebKit2GTK

There was an issue with URL handling that caused spoofing. This issue has been addressed through improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may result in address bar spoofing...

4.3CVSS6.4AI score0.006EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•17 views

Astra Linux – Vulnerability in Firefox

The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox 115...

6.5CVSS6.8AI score0.00515EPSS
SaveExploits0References2
Rows per page
Query Builder