629 matches found
CVE-2025-13082
CVE-2025-13082 concerns Drupal core, where a UI misrepresentation of critical information allows content spoofing. Affected versions are Drupal core: 8.0.0–before 10.4.9, 10.5.0–before 10.5.6, 11.0.0–before 11.1.9, and 11.2.0–before 11.2.8. The vulnerability stems from the user interface displayi...
CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...
CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...
PT-2025-47346
Name of the Vulnerable Software and Affected Versions Drupal versions 8.0.0 through 10.4.9 Drupal versions 10.5.0 through 10.5.6 Drupal versions 11.0.0 through 11.1.9 Drupal versions 11.2.0 through 11.2.8 Description A flaw exists in Drupal core that allows for content spoofing through a user...
Mozilla Thunderbird < 115.0.1
The version of Thunderbird installed on the remote Windows host is prior to 115.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-27 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be...
Drupal core 安全漏洞
Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability in Drupal core versions prior to 10.4.9, 10.5.0 through 10.5.6, 11.0.0 through 11.1.9, and 11.2.0 through 11.2.8 stems from a misrepresentation of critical information i...
Siemens SIMATIC S7-1500 and Ruggedcom ROX Devices Improper Neutralization of Special Elements in Output Used by a Downstream Component (CVE-2023-29383)
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this directly e.g., adding a new user fails because \n is in the block list, it is possible to misrepresent the /etc/passwd file when...
Exploit for User Interface (UI) Misrepresentation of Critical Information in Microsoft
CVE-2025-9491 LNK Obfuscation PoC A proof-of-concept tool for...
VulnCheck KEV: CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...
EUVD-2021-26043
Malware in sbrugna...
EUVD-2005-2750
Malware in sbrugna...
EUVD-2019-18592
Malware in sbrugna...
EUVD-2002-2395
Malware in sbrugna...
EUVD-2009-1108
Malware in sbrugna...
EUVD-2017-1242
Malware in sbrugna...
EUVD-2006-0181
Malware in sbrugna...
EUVD-2020-28490
Malware in sbrugna...
EUVD-2021-10001
Malware in sbrugna...