Lucene search
K

72 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/13 5:57 p.m.1 views

CVE-2026-20872

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.5AI score0.1911EPSS
Exploits0References2Affected Software24
RedhatCVE
RedhatCVE
added 2025/12/19 3:16 p.m.2 views

CVE-2025-14744

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...

6.5CVSS5.8AI score0.00169EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 2:21 p.m.18 views

CVE-2025-14744 Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...

0.00169EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 2:21 p.m.2 views

CVE-2025-14744 Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...

5.8AI score0.00169EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-52225

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS 144.0...

6.3AI score0.00169EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.4 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 144.0, which stems from improper handling of Unicode RTLO characters and can lead to filename spoofing attacks...

6.5CVSS6.1AI score0.00169EPSS
Exploits0References2
Mozilla
Mozilla
added 2025/12/15 12:0 a.m.13 views

Security Vulnerabilities fixed in Firefox for iOS 144.0 — Mozilla

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type...

6.5CVSS6.7AI score0.00169EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.3 views

Mozilla Thunderbird < 115.0.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-27 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment...

8.8CVSS8.3AI score0.00556EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-9805

Malware in sbrugna...

8.4CVSS6.4AI score0.01395EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-4944

Malware in sbrugna...

9.3CVSS6.4AI score0.01989EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2342

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.00321EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/07/27 4:14 p.m.11 views

CVE-2014-125119

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the use...

8.4CVSS6.8AI score0.01395EPSS
Exploits0References1
NVD
NVD
added 2025/07/25 4:15 p.m.5 views

CVE-2014-125119

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the use...

8.4CVSS0.01395EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/07/25 3:59 p.m.12 views

CVE-2014-125119 WinRAR < 5.00 Filename Spoofing RCE

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the use...

8.4CVSS0.01395EPSS
Exploits0References6
CVE
CVE
added 2025/07/25 3:59 p.m.30 views

CVE-2014-125119

CVE-2014-125119 describes a filename spoofing vulnerability in WinRAR when opening specially crafted ZIP archives. The root cause is an inconsistency between the Central Directory and Local File Header entries, which causes WinRAR to display the Central Directory filename while extracting and exe...

8.4CVSS6.9AI score0.01395EPSS
In wildExploits0References6
Vulnrichment
Vulnrichment
added 2025/07/25 3:59 p.m.3 views

CVE-2014-125119 WinRAR < 5.00 Filename Spoofing RCE

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the use...

8.4CVSS7.7AI score0.01395EPSS
Exploits0References6
VulnCheck KEV
VulnCheck KEV
added 2025/07/25 12:0 a.m.6 views

VulnCheck KEV: CVE-2014-125119

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the use...

8.4CVSS6AI score0.01395EPSS
In wildExploits0References3
CNNVD
CNNVD
added 2025/07/25 12:0 a.m.4 views

WinRAR 安全漏洞

WinRAR is a file compressor from WinRAR. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. A security vulnerability exists in WinRAR that stems from inconsistent display of filenames in ZIP files, which could lead to filename spoofing and...

8.4CVSS7.7AI score0.01395EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.4 views

PT-2025-31210 · Undefined · Undefined

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the use...

8.4CVSS7.5AI score0.01395EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 4:10 a.m.7 views

CVE-2023-39137

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...

7.8CVSS6.7AI score0.00321EPSS
Exploits1
Rows per page
Query Builder