Mozilla: Potential spoof due to obscured address bar

The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have positioned a datalist element to obscure the address bar...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Details have emerged about a high-severity security vulnerability impacting Service Location Protocol SLP that could be weaponized to launch volumetric denial-of-service attacks against targets. "Attackers exploiting this vulnerability could leverage vulnerable instances to launch massive...

Spoofing Attack

Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists due to the incorrect security UI in Navigation, which allows an attacker to perform domain spoofing via a crafted HTML page...

Spoofing Attack

Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists due to the incorrect security UI in Picture In Picture, which allows an attacker to potentially perform navigation spoofing via a crafted HTML page...

Mozilla Thunderbird Trust Management Issues Vulnerability (CNVD-2023-55352)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security vulnerability exists in Mozilla Thunderbird, which can be exploited to conduct...

MGASA-2023-0146 Updated firefox packages fix security vulnerability

Updated firefox and libwebp packages fix security vulnerabilities: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash CVE-2023-1945. A website could have obscured the fullscreen notification by using a combination of...

Security Bulletin: Vulnerabilities in NTP affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary The switch firmware deliverables listed below have addressed the applicable NTP CVEs. Vulnerability Details Summary The switch firmware deliverables listed below have addressed the applicable NTP CVEs. Vulnerability Details: CVE-ID: CVE-2014-9750 Description: NTP NTPd could allow a remote...

Mozilla: Fullscreen notification obscured

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. This could have led to user confusion and possible spoofing attack...

Mozilla Thunderbird 信任管理问题漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security vulnerability exists in Mozilla Thunderbird, which can be exploited to conduct...

Ubuntu: Security Advisory (USN-6015-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6015-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

USN-6015-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

SUSE CVE-2023-29533

A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 112, Focus for Android 112,...

The vulnerability of the Google Chrome browser’s Navigation function, which allows a hacker to perform a spoofing attack

The vulnerability of Google Chrome’s Navigation function exists due to insufficient verification of data entered by users. Exploiting this vulnerability allows a malicious actor to carry out a spamming attack using a specially created web page...

PT-2023-2203 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a tampering vulnerability in Microsoft Edge, where errors in the user interface's representation of information can be exploited. This can allo...

The vulnerability of the Internals component of Google Chrome and Microsoft Edge browsers allows attackers to carry out spoofing attacks.

The vulnerability of the Internals component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...

The vulnerability of Google Chrome and Microsoft Edge browsers’ Intents function allows attackers to perform spoofing attacks.

The vulnerability of Google Chrome and Microsoft Edge’s Intents function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...

The vulnerability of the Azure Service Fabric distributed system, related to errors in information representation by the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of the Azure Service Fabric distributed system is related to errors in information representation by the user interface. Exploiting this vulnerability may allow a malicious actor to perform a spoofing attack remotely...

The vulnerability of the WebApp components of Google Chrome and Microsoft Edge allows attackers to carry out spoofing attacks.

The vulnerability of the WebApp components of Google Chrome and Microsoft Edge is related to the improper implementation of security checks for standard elements during the loading process. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a speciall...