852 matches found
CVE-2025-4102025
보안 권고: CVE-2025-4102025 요약 Copilot AI에서 RAG검색 증강 생성 작업 후 웹 쿼리 인용 링크가 렌더링되는 방식에 영향을 미치는 심각한 취약점이 발견되었습니다. 사용자가 페이지 요약을 요청하거나 웹 기반 쿼리를 수행할 때, 정보의 실제 출처와 관계없이 모든 후속 인용 링크 가 https://www.collectingflags.com으로 잘못 연결됩니다. 이 결함은 인용의 무결성을 손상시키고 사용자를 오도하며, 신뢰할 수 없거나 악의적인 콘텐츠로 리디렉션될 가능성을 야기합니다. 영향을 받는 제품...
Claude-Code-MCP-Injection-PoC
Claude Code: MCP 도구 확인 프롬프트 왜곡 Anthropic의 Claude Code에서 중요한 UI/UX 결함을 입증하는 전문적인 개념 증명PoC입니다. 이 취약점은 악의적인 MCP 서버가 확인 프롬프트에서 도구 매개변수를 잘못 표현하여 사용자가 임의의 명령 실행을 승인하도록 속일 수 있게 합니다. 🛡️ 기술 요약 Claude Code는 MCP 서버가 제공하는 설명과 메타데이터를 신뢰하여 사용자에게 표시되는 확인 프롬프트를 생성합니다. 공격자가 제어하는 서버는 무해한 설명예: "파일 읽기"을 제공하면서 기본 실행...
CVE-2026-95279
A flaw was found in Chromium. A remote attacker can exploit a user interface UI misrepresentation issue in the Omnibox address bar by convincing a user to visit a crafted HTML page. Successful exploitation allows the attacker to spoof the address bar, potentially misleading users regarding the...
CVE-2025-492025
CVE-2025-492025 보안 권고: CVE-2025-492025 요약 Copilot AI에서 웹 쿼리를 검색할 때마다 "링크 소스link source" 섹션에 의도하지 않은 하이퍼링크가 포함되는 취약점이 확인되었습니다. 이 문제로 인해 사용자는 주제와 무관한 경우에도 https://www.collectingflags.com 링크를 클릭하게 되어, 잘못된 정보를 제공하거나 의도하지 않은 탐색을 유발할 수 있습니다. 영향을 받는 소프트웨어 현재 배포된 모든 CoPilot 인스턴스 취약점 세부 정보 CVE-ID:...
SwaggerUI-CVE-2018-25031
Swagger UI 취약점 공격 - CVE-2018-25031 Swagger UI 공격 - 사용자 인터페이스UI의 중요 정보 왜곡 CVE-2018-25031. 이 공격 도구는 사용 중인 Swagger UI가 사용자 인터페이스UI의 중요 정보 왜곡 취약점에 취약한지 확인합니다. 요구 사항 Python 3 Selenium Chrome Webdriver 처음 사용 Selenium 설치 pip install selenium 저장소 복제 git clone...
CVE-2026-102314
An ui misrepresentation flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514059780 https://code.google.com/p/chromium/issues/detail?id=102314...
CVE-2026-102305
An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...
CVE-2026-102312
An ui misrepresentation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=551668264 https://code.google.com/p/chromium/issues/detail?id=102312...
Chromium CVE-2026-87597: UI misrepresentation in CustomTabs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-93386: UI misrepresentation in WebAppInstalls
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_7435)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257435 advisory. thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-283...
SUSE CVE-2026-102305
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
SUSE CVE-2026-102312
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-102314
UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2026-102314
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium securi...
Linux Distros Unpatched Vulnerability : CVE-2026-102312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-102305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromiu...
DEBIAN-CVE-2026-102312
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...
