ROS-20260715-73-0012

The vulnerability of Google Chrome’s user interface is related to errors in how information is presented on the user interface. Exploiting this vulnerability can allow a remote attacker to execute a spear-phishing attack...

The vulnerability of Google Chrome’s Payments component on Android operating systems allows attackers to perform spear-phishing attacks.

The vulnerability of Google Chrome’s Payments component on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spearishing attacks...

PT-2026-53495

Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token | Field | Value | | ---------------- | ----- | | Repository | pipeboard-co/meta-ads-mcp | | Affected version | ≤ 1.0.101 commit 496c988 7d14226; Versions 1.0.102–1.0.105 lack git tags, so patch status is unconfirmed. | |...

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge browsers allows a hacker to perform domain substitution attacks.

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...

The vulnerability of the Webview API in the Visual Studio Code editor allows attackers to replace data and perform cross-site scripting (XSS) attacks.

The vulnerability of the Webview API of the Visual Studio Code editor is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a remote attacker to replace data and perform cross-site scripting attacks...

The vulnerability of the Cronet web component in Google Chrome allows a hacker to replace the domain name.

The vulnerability of the Cronet web component of Google Chrome is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace a domain name using a specially created domain name...

The vulnerability of the Telnet protocol implementation in the cryptographic security tool PuTTY, which allows attackers to perform spoofing attacks

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the loadSafeLabel() function in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the loadSafeLabel function in Android operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Speech component in Google Chrome and Microsoft Edge browsers allows attackers to carry out spoofing attacks.

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of the Omnibox address bar in Google Chrome allows attackers to perform spoofing attacks.

The vulnerability of the Omnibox address bar in Google Chrome is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

GO-2026-4326 Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server

Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

CVE-2025-71241

SPIP

HPE Aruba Networking 5G Core server API 安全漏洞

The HPE Aruba Networking 5G Core Server API is a programming and management interface provided by the American company HPE. There are security vulnerabilities associated with the HPE Aruba Networking 5G Core Server API. These vulnerabilities stem from improper handling of API errors, which may...

Mattermost is vulnerable to DoS due to infinite re-renders on API errors

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

EUVD-2026-2916

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

ROS-20251217-7310

A vulnerability in Mozilla Firefox and Firefox ESR browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

PT-2026-3244

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.8 Mattermost versions 11.1.x through 11.1.1 Mattermost versions 11.0.x through 11.0.6 Description The software contains a flaw that does not prevent infinite re-renders when API errors occur...

EUVD-2004-1693

Malware in sbrugna...

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

The vulnerability of the URL address line in Mozilla Firefox allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Mozilla Firefox browser’s address bar is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...