1018 matches found
CVE-2018-25031
CVE-2018-25031 CVE-2018-25031 exploits tests Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. HowTo Find the documentation endpoint a...
CVE-2018-5353
CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus Client Privilege Escalation/RCE Information Vendor: Zohocorp Product: ManageEngine ADSelfServicePlus Versions Affected: Before 5.5 build 5517 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The cust...
Backward-Compatible Tag-Based PHY Authentication for Secure WLAN Sensing
Driven by ongoing standardization efforts, Wi-Fi sensing has recently emerged as a promising functionality within wireless local area networks WLANs. However, due to the use of standard null-data packets NDPs to estimate the channel, conventional Wi-Fi sensing systems are susceptible to spoofing...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page...
Astra Linux – Vulnerability in Thunderbird, Firefox
A website could have obscured the full-screen notification by using a URL that was processed by an external program, such as a mailto URL. This could have caused confusion among users and potentially led to spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbi...
Astra Linux – Vulnerability in Firefox
A malicious website can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been exploited in a spoofing attack. This vulnerability affects Firefox versions earlier than 119...
EUVD-2026-73643
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, relates to the ability to bypass authentication through spoofing. This allows attackers to carry out spoofing attacks.
The vulnerability of the Prisma Access Agent, a user-level remote access agent, relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows attackers to carry out spoofing attacks...
Adversarial Vulnerabilities of Neural Biomarker Identification Systems
There is growing interest in the proposed use of EEG signals as biometric credentials, but thus far there has been little research on the reliability and security of such biometrics. Prior adversarial tests have focused on deep-learning classifiers and assumed attackers have full access to the...
The vulnerability of the /_og/d/*.png component of the Open Graph image generation module in the Nuxt OG Image framework, which is used for creating web applications and sites using Nuxt.js. This allows attackers to perform spoofing attacks.
The vulnerability of the og/d/.png component of the Open Graph image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites using Nuxt.js, relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability cou...
PT-2026-70395
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...
EUVD-2026-52533
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52530
Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
PT-2026-67563
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-50924
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-57978
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
ROS-20260721-73-0048
The vulnerability of the SSL Secure Sockets Layer protocol implementation in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created HTML page...
ROS-20260720-73-0015
The vulnerability of Google Chrome’s Picture In Picture technology is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack using a specially created web page...
