1151 matches found
CVE-2025-58179-Check
CVE-2025-58179-Check CVE-2025-58179-Check is a simple Python script to verify SSRF Server-Side Request Forgery / Content Spoofing vulnerability on the /image endpoint in the Astro framework. This vulnerability is tracked as GHSA-qpr4-c339-7vq8 and CVE-2025-58179. Vulnerability Background This...
wp-ulike-cve-2025-32259-poc
WP ULike ≤ 4.7.9.1 - Неаутентифицированный спуфинг контента CVE-2025-32259 🔬 Простой PoC, демонстрирующий CVE-2025-32259 в плагине WP ULike для WordPress. 🚨 Только для образовательных целей – не тестируйте на системах без явного разрешения. 🧠 Обзор WP ULike — популярный плагин для WordPress,...
CVE-2025-52652
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft...
EUVD-2025-210860
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft...
CVE-2025-52652
HCL MyXalytics is affected by a Content Spoofing Vulnerability that may allow an attacker to manipulate displayed content so it appears to originate from a trusted source, potentially leading to phishing or data theft. The vulnerability requires low privileges and user interaction , with a CVSS 3...
PT-2026-86671
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft...
CVE-2026-77818
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...
EUVD-2026-71101
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...
CVE-2026-77818
CVE-2026-77818 is a reflected HTML injection vulnerability in Yordam Informatics' Library Information and Document Automation Program (affects versions from v22.1 before v22.2 ), exploitable via form hijacking during web page generation. The vulnerability allows content spoofing and is rated CVSS...
CVE-2026-77818 Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...
Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool
Summary Potential vulnerability in AngularJS has been identified that affects IBM License Key Server Administration and Reporting Tool. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization ...
CVE-2026-78078
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...
CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...
EUVD-2026-68527
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...
CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...
CVE-2026-78078
Helix Ultimate is a Joomla template by joomshaper.com. In versions prior to 2.2.10 , image uploads were validated only by file extension and basic size parameters, allowing an attacker with privileged access to upload non-image files disguised with raster extensions — a content spoofing bypass. T...
CVE-2026-78079 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...
CVE-2026-78079 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...
CVE-2026-78079
Helix Ultimate is a Joomla template published by joomshaper.com . In versions prior to 2.2.10 , an open redirect vulnerability exists in the return redirect handling: arbitrary Base64-encoded strings were accepted as return parameters without verifying that the resolved target was an internal sit...
CVE-2026-47080
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...