CVE-2026-95309

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95288

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95307

A UI misrepresentation vulnerability exists in the ExtensionsMenu of Google Chrome prior to version 154.0.8037.57 . A remote attacker can use social engineering to spoof UI elements by hosting a crafted HTML page. This issue is categorized as Low severity by Chromium. Remediation is available in ...

CVE-2026-95307

UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95307

UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95321

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95321

Google Chrome on Android prior to version 154.0.8037.57 is vulnerable to a UI misrepresentation flaw in the Payments component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . Remediation involves updating the browser to version 154.0.8037.57 or later. Spe...

EUVD-2026-89126

UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95363

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw within the FileSystem component. A remote attacker can utilize social engineering and a crafted HTML page to spoof UI elements. Remediation is available in version 154.0.8037.57 , with specific fixes confi...

EUVD-2026-89259

UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95294

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw in the Browser component. A remote attacker can exploit this by leveraging social engineering to spoof UI elements through a crafted HTML page. Remediation is available in version 154.0.8037.57 ; for examp...

CVE-2026-95337

UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95294

UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95346

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95346

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95294

UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-102496

A flaw was found in Apache XMLSchema. When constructing its schema model, the parser does not restrict how deeply schema structures can be nested. A remote attacker could exploit this vulnerability by providing a crafted XML schema containing deeply nested elements, triggering uncontrolled...

XnlReveal

About - v4.5 This is a Chrome/Firefox Extension that can do the following: For hosts that are in scope: Show an alert for any query parameters that are reflected and identify "sus" parameters. Optionally check if the characters '," and are reflected without being encoded. Write details of reflect...

https-nj.gov---CVE-2020-11023

https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons 版本 1.13 至 1.13.10、2.0 至 2.0.5 及更早的不受支持版本中存在一个属性绑定漏洞，原因是未能正确中和特殊元素。未经身份验证的远程恶意用户（或攻击者）可以针对基于 Spring Data REST 的 HTTP 资源提供精心构造的请求参数，或使用 Spring Data 基于投影的请求负载绑定，从而导致远程代码执行攻击。 更多信息请参见此处 运行 该应用程序可以使用易受攻击版本或已修复版本的 Spring Data Commons 进行测试。 易受攻击版本（默认）： mvn spring-boot:r...