The vulnerability of the Navigation components in Google Chrome and Microsoft Edge allows attackers to circumvent existing security restrictions.

The vulnerability of the Navigation components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the page. Exploiting this vulnerability allows an attacker to bypass existing security restrictions by using a specially created HTML page...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to a lack of mechanisms for verifying the source, allows attackers to access confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. This allows an attacker to trigger a service failure.

The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. Exploiting this vulnerability allows an attacker to trigger a service failure using specially created BFD packets...

GHSA-C9PR-Q8GX-3MGP

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10143 2025-04-02 22:06:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270641178668879 2025-04-02 22:06:50+00:00| seen|...

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows attackers to disclose protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information through a specially...

CVE-2022-4800

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

The vulnerabilities of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, are related to a lack of mechanisms for verifying the source of access requests. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, are related to a lack of mechanisms for verifying the source of data. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

The vulnerability of FortiOS operating systems, related to the lack of a mechanism for verifying the source of information, allows attackers to compromise the integrity of the protected information.

The vulnerability of the FortiOS operating systems is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

The vulnerability of GUE tunneling protocols, related to insufficient verification of the communication channel source, allows attackers to execute attacks such as “substitution of the trusted object”.

The vulnerability of GUE tunneling protocols lies in insufficient verification of the source of the communication channel. Exploiting this vulnerability allows a malicious actor to execute attacks such as “substitution of the trusted object” by sending a specially crafted packet containing two IP...

The vulnerabilities of the GRE and GRE6 tunneling protocols, related to insufficient source checking of the communication channel, allow attackers to execute attacks such as “spoofing of trusted objects”.

The vulnerabilities of the tunneling protocols GRE and GRE6 are related to insufficient verification of the source of the communication channel. Exploiting these vulnerabilities allows a malicious actor to carry out “host substitution” attacks by sending a specially crafted packet with two IP...

CVE-2024-43771

creationtimestamp| type| source ---|---|--- 2025-01-21 23:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbydkbpco2t 2025-01-21 23:50:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgc26iscxn2b 2025-01-22 18:02:33+00:00| seen|...

CVE-2024-36506

An improper verification of source of a communication channel vulnerability CWE-940 in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection...

PT-2025-1234 · Unknown · Ipv6-In-Ipv4 Tunneling

Name of the Vulnerable Software and Affected Versions: IPv6-in-IPv4 tunneling RFC 4213 versions not specified Description: The issue is related to the IPv6-in-IPv4 tunneling protocol, which allows an attacker to spoof and route traffic via an exposed network interface. This can be exploited by a...

CVE-2024-56728

creationtimestamp| type| source ---|---|--- 2024-12-29 12:10:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113736037584609678 2024-12-29 12:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legyntwank2f 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-49052

creationtimestamp| type| source ---|---|--- 2024-11-26 19:47:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113550980708800465 2024-11-26 20:17:26+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113551097595837936 2025-02-06 02:44:20+00:00| seen|...

The vulnerability of the iframe plugin in the JetBrains YouTrack software environment allows a hacker to execute arbitrary JavaScript code and unauthorized API calls.

The vulnerability of the iframe plugin in the JetBrains YouTrack software environment relates to insufficient verification of the connection source. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code and make unauthorized API requests...

Improper Source Verification

cups-filter is vulnerable to Improper Source Verification. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source, and can cause the Get-Printer-Attributes IPP request to an attacker controlled URL. Due to the service binding to :631 INADDRANY , multiple bugs in...

CVE-2024-38886

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel...

The vulnerability of the mechanism for transmitting information about ICMP Redirects for TP-LINK TL-7DR5130 wireless router microprogramming systems allows a hacker to intercept traffic.

The vulnerability of the mechanism for transmitting information about ICMP Redirect for TP-LINK TL-7DR5130 wireless router microprogramming systems is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability allows a malicious actor to interce...

The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, stems from a lack of a mechanism for verifying the source of information. This allows attackers to compromise the integrity and accessibility of the system.

The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow attackers to compromise the integrity and...