SwaggerUI-CVE-2018-25031

Exploit Swagger UI - CVE-2018-25031 Эксплойт Swagger UI - Неправильное представление важной информации в пользовательском интерфейсе UI CVE-2018-25031. Этот эксплойт проверяет, уязвим ли используемый Swagger UI к эксплуатации уязвимости неправильного представления важной информации в...

CVE-2026-79108

CVE-2026-79108 affects Google Chrome prior to 152.0.7977.65 , specifically in the Web Authentication (Passkeys & Security Keys) component. A UI misrepresentation allows a remote attacker , leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. Chro...

CVE-2026-79009

CVE-2026-79009 is a UI misrepresentation vulnerability in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements by serving a crafted HTML page to the victim. Chromium classifies the severity as Low . The affected component is the browser's...

CVE-2026-79284

CVE-2026-79284 is a UI misrepresentation vulnerability in Google Chrome for Mac , affecting versions prior to 152.0.7977.65 . The flaw resides in the Core component and allows a remote attacker who has already compromised the renderer process to spoof UI elements through a crafted HTML page. Chro...

CVE-2026-79098

CVE-2026-79098 is a UI misrepresentation vulnerability in PermissionElement within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements through a crafted HTML page , potentially misleading users into granting unintend...

CVE-2026-79233

This vulnerability affects Google Chrome on Android prior to version 152.0.7977.65 . The issue is a UI misrepresentation in the CustomTabs component, which allowed a remote attacker to spoof the address bar using a crafted HTML page. Chromium classifies the security severity as Low . The fix is t...

CVE-2026-78974

CVE-2026-78974 is a UI misrepresentation vulnerability in the Linux Toolkit Theming component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could use a crafted HTML page to bypass system access restrictions. Chromium classifies th...

CVE-2026-79283

CVE-2026-79283 is a UI misrepresentation vulnerability in the Geometry component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page to spoof UI elements , potentially tricking users into interacting with deceptive content. Chromium ...

CVE-2026-78912

CVE-2026-78912 is a UI misrepresentation vulnerability in the Browser component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page that spoofs UI elements, potentially deceiving users. Chromium assigns this a Medium sev...

CVE-2026-79204

CVE-2026-79204 is a UI misrepresentation vulnerability in the Input component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements, potentially deceiving users into interacting with forged inte...

CVE-2026-79176

CVE-2026-79176 is a UI misrepresentation vulnerability in the Extensions component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering through a crafted Chrome extension, could obtain sensitive information from the user. Chromium assigne...

CVE-2026-79011

Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation vulnerability in the Browser component. A remote attacker leveraging social engineering can craft an HTML page that misrepresents the browser UI, allowing them to bypass system access restrictions . Chromium classifies the...

CVE-2025-4102025

Avis de sécurité : CVE-2025-4102025 Résumé Une vulnérabilité critique a été découverte dans Copilot AI affectant la façon dont les liens de citation de requêtes web sont rendus après les opérations de génération augmentée de récupération RAG. Lorsque les utilisateurs demandent des résumés de page...

CVE-2025-492025

CVE-2025-492025 Avis de sécurité : CVE-2025-492025 Résumé Une vulnérabilité a été identifiée dans Copilot AI qui entraîne l'inclusion d'un hyperlien non intentionnel dans la section « source des liens » à chaque fois que Copilot récupère une requête web. Ce problème a conduit les utilisateurs à...

Claude-Code-MCP-Injection-PoC

Claude Code : Détournement de l'invite de confirmation d'outil MCP Une preuve de concept PoC professionnelle démontrant un défaut critique d'interface utilisateur/expérience utilisateur dans Claude Code d'Anthropic. Cette vulnérabilité permet à un serveur MCP malveillant d'induire les utilisateur...

Tanium Server 7.7.3.x < 7.7.3.8298 / 7.8.2.x < 7.8.2.1198 / 7.8.4.x < 7.8.4.1327 UI Misrepresentation (TAN-2026-017)

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8298, 7.8.2.x prior to 7.8.2.1198, or 7.8.4.x prior to 7.8.4.1327. It is, therefore, affected by a vulnerability: - A UI misrepresentation of critical information vulnerability could allow an authenticated Tanium...

Malicious code in express-rate-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c2ed4e91378e1ca9df444de58c0ff3afebce39741ab67011b55490740cac11 The package is published under the name express-rate-controller but describes itself as an SVG utilities library and ships a bin named svgcraft — the...

EUVD-2026-46405

Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...

CVE-2026-11925

Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...

CVE-2026-11925

Technical details (affected component/version/root cause/impact) are not publicly available in the provided documents. Monitor for updates from Tanium and CVE records for any additional technical specifics.