384 matches found
CVE-2025-4102025
安全公告：CVE-2025-4102025 摘要 在 Copilot AI 中发现了一个严重漏洞，影响检索增强生成（RAG）操作后 Web 查询引用链接的渲染方式。当用户请求页面摘要或执行基于 Web 的查询时，所有后续引用链接 都被错误地链接到 https://www.collectingflags.com，无论信息的真实来源如何。 该缺陷损害了引用的完整性，误导了用户，并可能导致重定向到不受信任或恶意内容。 受影响产品 Copilot AI（所有支持 Web 连接的版本） 任何集成了 Copilot 且支持 RAG 引用功能的应用程序 漏洞详情 CVE ID：...
Claude-Code-MCP-Injection-PoC
Claude Code: Representación Engañosa de la Confirmación de Herramientas MCP Una Prueba de Concepto PoC profesional que demuestra una falla crítica de UI/UX en Claude Code de Anthropic. Esta vulnerabilidad permite que un servidor MCP malicioso engañe a los usuarios para que aprueben la ejecución d...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prio...
CVE-2026-87462
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36...
CVE-2026-87496
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.3...
CVE-2026-87649
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010...
CVE-2026-87458
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010...
CVE-2026-87567
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0...
CVE-2026-87624
UI misrepresentation in Passwords in Google Chrome on on Android prior...
CVE-2026-87583
UI misrepresentation in Passwords in Google Chrome on on Android prior...
CVE-2026-87635
UI misrepresentation in Payments in Google Chrome prior to 153.0.8010...
CVE-2026-87445
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.3...
CVE-2026-87507
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010...
CVE-2026-87501
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010...
CVE-2026-87653
UI misrepresentation in FullScreen in Google Chrome on on Windows prio...
CVE-2026-87484
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010...
CVE-2025-492025
CVE-2025-492025 Aviso de Seguridad: CVE-2025-492025 Resumen Se ha identificado una vulnerabilidad en Copilot AI que provoca que se incluya un hipervínculo no deseado en la sección "link source" cada vez que Copilot realiza una consulta web. Este problema provocó que los usuarios hicieran clic en...
CVE-2026-87624
A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...
CVE-2026-87653
A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation in FullScreen mode, allowing the attacker to spoof UI elements...