CVE-2018-25031

CVE-2018-25031 Pruebas de exploits CVE-2018-25031 Swagger UI anterior a 4.1.3 podría permitir que un atacante remoto realice ataques de suplantación. Al persuadir a una víctima para que abra una URL manipulada, un atacante podría explotar esta vulnerabilidad para mostrar definiciones OpenAPI...

CVE-2018-5353

CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus — Escalada de Privilegios/RCE en el Cliente Información Proveedor: Zohocorp Producto: ManageEngine ADSelfServicePlus Versiones Afectadas: anteriores a 5.5 build 5517 Investigador: Jason Juntunen alias @missing0x00 https://github.com/missing0x00...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page...

Astra Linux – Vulnerability in Firefox

A malicious website can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been exploited in a spoofing attack. This vulnerability affects Firefox versions earlier than 119...

Astra Linux – Vulnerability in Thunderbird, Firefox

A website could have obscured the full-screen notification by using a URL that was processed by an external program, such as a mailto URL. This could have caused confusion among users and potentially led to spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbi...

EUVD-2026-73643

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, relates to the ability to bypass authentication through spoofing. This allows attackers to carry out spoofing attacks.

The vulnerability of the Prisma Access Agent, a user-level remote access agent, relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows attackers to carry out spoofing attacks...

PT-2026-70395

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

EUVD-2026-52533

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-52530

Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

PT-2026-67563

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-50924

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-57978

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

ROS-20260721-73-0048

The vulnerability of the SSL Secure Sockets Layer protocol implementation in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created HTML page...

ROS-20260720-73-0015

The vulnerability of Google Chrome’s Picture In Picture technology is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack using a specially created web page...

CVE-2026-58643 Windows Admin Center Spoofing Vulnerability

...

EUVD-2026-43780

Improper neutralization of input during web page generation 'cross-site scripting' in Power BI allows an authorized attacker to perform spoofing over a network...

EUVD-2026-43766

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-55020

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...