963 matches found
EUVD-2025-24340
Malicious code in bioql PyPI...
EUVD-2023-56071
Malicious code in bioql PyPI...
EUVD-2025-6348
Malicious code in bioql PyPI...
EUVD-2024-42753
Malicious code in bioql PyPI...
EUVD-2025-9658
Malicious code in bioql PyPI...
EUVD-2024-19104
Malicious code in bioql PyPI...
EUVD-2025-17722
Malicious code in bioql PyPI...
Collusion-Driven Impersonation Attack on Channel-Resistant RF Fingerprinting
Radio frequency fingerprint RFF is a promising device identification technology, with recent research shifting from robustness to security due to growing concerns over vulnerabilities. To date, while the security of RFF against basic spoofing such as MAC address tampering has been validated, its...
Dell Data Domain OS Auth Bypass (DSA-2025-159)
According to its self-reported version number, the version of Dell Data Domain OS is affected by an auth bypass vulnerability as disclosed in the DSA-2025-159 advisory: - Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15,...
CVE-2025-10290
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS...
CVE-2025-10290 Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...
PT-2025-54576
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Split View component of the Google Chrome browser related to errors in how information is presented in the user interface. Remote exploitation of this issue could...
PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.
...
CVE-2025-56608
The CVE-2025-56608 entry concerns the SourceCodester Android app “Corona Virus Tracker App India” v1.0. The issue is in OkHttpClientWrapper.java, where handleDigest() hashes credentials with MD5 via MessageDigest.getInstance("MD5"). MD5 is used for digest authentication, introducing weaknesses su...
Microsoft Windows Certificates 数据伪造问题漏洞
Microsoft Windows Certificates is a digital certificate software from Microsoft Corporation USA. A data forgery vulnerability exists in Microsoft Windows Certificates that stems from improper cryptographic signature verification and could lead to spoofing attacks...
CVE-2025-8364
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 141...
CVE-2025-25006
Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
