206 matches found
EUVD-2026-44703
Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...
CVE-2026-45150 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing
Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...
CVE-2026-45150
Zen Browser is a Firefox-based browser. The CVE-2026-45150 issue affects Zen prior to version 1.19.13b, where there was no persistent, clearly visible security notification when a page entered fullscreen. This could allow an attacker-controlled page to hide the real browser UI and origin informat...
CVE-2026-45150 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing
Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and...
UFONet 2.0
UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set the origin through a crafted HTML page...
Astra Linux – Vulnerability in Firefox and Thunderbird
An attacker could exploit XSLT error handling mechanisms to associate attacker-controlled content with another origin that is displayed in the address bar. This could be used to trick users into submitting data intended for the spoofed origin. This vulnerability affects Thunderbird 102.2,...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites through a crafted HTML page...
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Impact A Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper handling of URLs during Server-Side Rendering SSR. When an attacker sends a request such as GET /\evil.com/ HTTP/1.1 the server engine Express, etc. passes the URL string to Angular’s...
CVE-2026-26927 URL (HTTP Origin) call location spoofing in Szafir SDK Web
Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the necessary files when launched. In Szafir SDK Web it is possible to change the URL HTTP Origin of the application call location. An unauthenticated attacker can craft a website that is able to launch...
CVE-2026-26927
CVE-2026-26927 affects Szafir SDK Web and SzafirHost usage: Szafir SDK Web can launch SzafirHost with arbitrary arguments by exploiting an unvalidated document_base_url shown in the confirmation prompt. An unauthenticated attacker can craft a site to initiate the host, and if the user confirms (w...
Exploit for Missing Authorization in Google Chrome
!DOIhttps://img.shields.io/badge/DOI-10.5281%2Fzenodo.184137...
EUVD-2014-1424
Malware in sbrugna...
EUVD-2005-2269
Malware in sbrugna...
EUVD-2016-2710
Malware in sbrugna...
EUVD-2002-0714
Malware in sbrugna...
EUVD-2013-0805
Malware in sbrugna...
EUVD-2023-33949
Malicious code in bioql PyPI...