SwaggerUI-CVE-2018-25031

Exploit Swagger UI - CVE-2018-25031 Эксплойт Swagger UI - Неправильное представление важной информации в пользовательском интерфейсе UI CVE-2018-25031. Этот эксплойт проверяет, уязвим ли используемый Swagger UI к эксплуатации уязвимости неправильного представления важной информации в...

CVE-2026-79108

CVE-2026-79108 affects Google Chrome prior to 152.0.7977.65 , specifically in the Web Authentication (Passkeys & Security Keys) component. A UI misrepresentation allows a remote attacker , leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. Chro...

CVE-2026-79009

CVE-2026-79009 is a UI misrepresentation vulnerability in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements by serving a crafted HTML page to the victim. Chromium classifies the severity as Low . The affected component is the browser's...

CVE-2026-79284

CVE-2026-79284 is a UI misrepresentation vulnerability in Google Chrome for Mac , affecting versions prior to 152.0.7977.65 . The flaw resides in the Core component and allows a remote attacker who has already compromised the renderer process to spoof UI elements through a crafted HTML page. Chro...

CVE-2026-79098

CVE-2026-79098 is a UI misrepresentation vulnerability in PermissionElement within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements through a crafted HTML page , potentially misleading users into granting unintend...

CVE-2026-79233

This vulnerability affects Google Chrome on Android prior to version 152.0.7977.65 . The issue is a UI misrepresentation in the CustomTabs component, which allowed a remote attacker to spoof the address bar using a crafted HTML page. Chromium classifies the security severity as Low . The fix is t...

CVE-2026-78974

CVE-2026-78974 is a UI misrepresentation vulnerability in the Linux Toolkit Theming component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could use a crafted HTML page to bypass system access restrictions. Chromium classifies th...

CVE-2026-79283

CVE-2026-79283 is a UI misrepresentation vulnerability in the Geometry component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page to spoof UI elements , potentially tricking users into interacting with deceptive content. Chromium ...

CVE-2026-78912

CVE-2026-78912 is a UI misrepresentation vulnerability in the Browser component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page that spoofs UI elements, potentially deceiving users. Chromium assigns this a Medium sev...

CVE-2026-79204

CVE-2026-79204 is a UI misrepresentation vulnerability in the Input component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements, potentially deceiving users into interacting with forged inte...

CVE-2026-79176

CVE-2026-79176 is a UI misrepresentation vulnerability in the Extensions component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering through a crafted Chrome extension, could obtain sensitive information from the user. Chromium assigne...

CVE-2026-79011

Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation vulnerability in the Browser component. A remote attacker leveraging social engineering can craft an HTML page that misrepresents the browser UI, allowing them to bypass system access restrictions . Chromium classifies the...

CVE-2025-4102025

Бюллетень безопасности: CVE-2025-4102025 Краткое описание В Copilot AI обнаружена критическая уязвимость, затрагивающая отображение ссылок на цитаты веб-запросов после операций поисково-дополненной генерации Retrieval-Augmented Generation, RAG. Когда пользователи запрашивают сводки страниц или...

CVE-2025-492025

CVE-2025-492025 Бюллетень безопасности: CVE-2025-492025 Сводка В Copilot AI была выявлена уязвимость, из-за которой в раздел «link source» источник ссылки при выполнении веб-запроса Copilot добавляется непреднамеренная гиперссылка. Эта проблема приводила к тому, что пользователи переходили по...

Claude-Code-MCP-Injection-PoC

Claude Code : Détournement de l'invite de confirmation d'outil MCP Une preuve de concept PoC professionnelle démontrant un défaut critique d'interface utilisateur/expérience utilisateur dans Claude Code d'Anthropic. Cette vulnérabilité permet à un serveur MCP malveillant d'induire les utilisateur...

Tanium Server 7.7.3.x < 7.7.3.8298 / 7.8.2.x < 7.8.2.1198 / 7.8.4.x < 7.8.4.1327 UI Misrepresentation (TAN-2026-017)

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8298, 7.8.2.x prior to 7.8.2.1198, or 7.8.4.x prior to 7.8.4.1327. It is, therefore, affected by a vulnerability: - A UI misrepresentation of critical information vulnerability could allow an authenticated Tanium...

Malicious code in express-rate-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c2ed4e91378e1ca9df444de58c0ff3afebce39741ab67011b55490740cac11 The package is published under the name express-rate-controller but describes itself as an SVG utilities library and ships a bin named svgcraft — the...

EUVD-2026-46405

Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...

CVE-2026-11925

Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...

CVE-2026-11925

Technical details (affected component/version/root cause/impact) are not publicly available in the provided documents. Monitor for updates from Tanium and CVE records for any additional technical specifics.