CVE-2025-51663

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share...

Linux Distros Unpatched Vulnerability : CVE-2018-6049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted...

CVE-2023-1236

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. Chromium security severity: Low...

MetaMask: Possible to spoof Origin in "Connected Sites"

A vulnerability was discovered in MetaMask that allowed for the spoofing of the origin domain name in the "Connected Sites" list. This was caused by a CSS style sheet that set the direction to "right-to-left", which resulted in the order of characters in the domain name being messed up and...

USN-5107-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof another origin, or execute arbitrary code...

USN-4054-1 firefox vulnerabilities

A sandbox escape was discovered in Firefox. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. CVE-2019-9811 Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted...

CVE-2018-6049

Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page...

CVE-2018-6049

Removed by vendor...

CVE-2018-6049: Undefined Security Weakness

Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page...

PT-2018-17324

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue concerns an incorrect security UI in permissions prompts, allowing a remote attacker to spoof the origin to which permission is granted. This can be achieved via a crafted HTM...

CVE-2016-1615

The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors...

PT-2014-8842

Name of the Vulnerable Software and Affected Versions Huawei P7-L10 smartphones versions prior to V100R001C00B136 Description The issue concerns the PackageInstaller module, which can be exploited by remote attackers to spoof the origin website. This allows bypassing the website whitelist...

PT-2013-2413

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 8.5.2 through 8.5.2.1 Description The issue allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. Recommendations For versions 8.5.2 through 8.5.2.1,...

CVE-2009-4130

Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name...

CVE-2009-4130: Undefined Security Weakness

Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name...