972 matches found
CVE-2018-25031
CVE-2018-25031 CVE-2018-25031 漏洞利用测试 Swagger UI 4.1.3 之前的版本可能允许远程攻击者进行欺骗攻击。通过诱使受害者打开精心构造的 URL，攻击者可以利用此漏洞显示远程 OpenAPI 定义。 HowTo 找到文档端点，并添加参数 "configUrl" 指向 test.json 或 "url" 指向 test.yaml。 root@kitploit:...
CVE-2018-5353
CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus 客户端权限提升/远程代码执行 信息 厂商: Zohocorp 产品: ManageEngine ADSelfServicePlus 受影响版本: 5.5 build 5517 之前的版本 研究人员: Jason Juntunen 又名 @missing0x00 https://github.com/missing0x00 CVSS: 8.8 描述 Zoho ManageEngine ADSelfService Plus 5.5 build 5517 之前版本中的自定义 GINA/CP...
EUVD-2026-73643
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
Astra Linux – Vulnerability in Firefox
A malicious website can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been exploited in a spoofing attack. This vulnerability affects Firefox versions earlier than 119...
Astra Linux – Vulnerability in Firefox
The z-order of browser windows can be manipulated to hide the fullscreen notifications. This could potentially be used to carry out a spoofing attack. This vulnerability has been fixed in Firefox 135 and Thunderbird 135...
Astra Linux – Vulnerability in Thunderbird, Firefox
A website could have obscured the full-screen notification by using a URL that was processed by an external program, such as a mailto URL. This could have caused confusion among users and potentially led to spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbi...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page...
PT-2026-70395
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...
EUVD-2026-52533
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52530
Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-50924
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-57978
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
...
CVE-2026-55020
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-54108
CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Active Directory Federation Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...
Windows Network Address Translation (NAT) Spoofing Vulnerability
Origin validation error in Windows Network Address Translation NAT allows an unauthorized attacker to perform spoofing over an adjacent network...