Citrix App Layering 2503: Elastic Layer Assignments Load Older Layer Version After ELM Upgrade

After upgrading the Enterprise Layer Manager ELM to version 2503, users continue to receive older versions of elastic layers on their virtual desktops, even after the elastic layer assignments have been updated to newer versions. Additional symptoms observed: New versions of App Layers are create...

CVE-2025-32385: Improper Restriction of Rendered UI Layers or Frames

EspoCRM is an Open Source Customer Relationship Management software. Prior to 9.0.5, Iframe dashlet allows user to display iframes with arbitrary URLs. As the sandbox attribute is not included in the iframe, the remote page can open popups outside of the iframe, potentially tricking users and...

Privacy-Preserving CNN Training with Transfer Learning: Two Hidden Layers

Whitepaper called Privacy-Preserving CNN Training With Transfer Learning: Two Hidden Layers...

CVE-2025-0362: Improper Restriction of Rendered UI Layers or Frames

An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213: Improper Restriction of Rendered UI Layers or Frames

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

PT-2025-15680 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: The issue is related to improper restriction of rendered UI layers or frames. If a user views and clicks on content on a malicious page while logged in, unintende...

CVE-2025-31138: Improper Restriction of Rendered UI Layers or Frames

tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where user-controlled inputs for element dimensions width and height were not properly validated. This allowed an attacker with direct access to the site's source code...

Citrix App Layering 2409 - Unable to Edit App Layers with Boot Error 0xc000000f

Administrators may encounter an issue where they are unable to edit Application Layers within Citrix Elastic Layer Management ELM version 2409 after applying the February 2025 patches to their Windows 11 24H2 packaging machines. This inability to edit App Layers is accompanied by aboot error code...

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, arises from improper restrictions on the visible layers of the user interface. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected informati...

CVE-2025-24310

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages...

CVE-2025-24310: Improper Restriction of Rendered UI Layers or Frames

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages...

Malicious code in tfjs-layers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01a2e2a8e8d3d2e521a17fe1f820c031a83b9a0b1a45819059fba2bc47348f98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2422 Malicious code in tfjs-layers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01a2e2a8e8d3d2e521a17fe1f820c031a83b9a0b1a45819059fba2bc47348f98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Citrix App Layering - Error "Cannot convert undefined or null to object"

Unable to import layers from a remote share. While attempting to connect to a share, we see the error "Cannot convert undefined or null to object". The error message is displayed after about 10 mins...

The vulnerability of Google Chrome’s user interface allows a perpetrator to replace the user interface.

The vulnerability of Google Chrome’s user interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to improper limitation of the number of user interface layers or frames displayed. This allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to improper restrictions on the layers or frames that are displayed in the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the UI components in operating systems such as visionOS, iOS, iPadOS, macOS, and the Safari browser allows attackers to gain unauthorized access to confidential data.

The vulnerability of the UI components in operating systems such as visionOS, iOS, iPadOS, macOS, and the Safari browser is related to an improper limitation on the layers of the user interface that can be displayed. Exploiting this vulnerability may allow a remote attacker to gain unauthorized...

CVE-2024-6351 Malformed packet leads to denial of service in NWK/APS layer

A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert...

CVE-2024-6466: Improper Restriction of Rendered UI Layers or Frames

NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified...