Design/Logic Flaw

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms, but this may be...

CVE-2022-37709

Tesla Model 3 V11.02022.4.5.1 6b701552d7a6 Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with the optional IBM Business Process Manager component Process Federation Server (CVE-2017-1788)

Summary WebSphere Application Server Liberty is shipped as a component of the optional IBM Business Process Manager component Process Federation Server. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty have been published in a security bulletin...

The vulnerability in the implementation of the XSLT (Extensible Stylesheet Language Transformations) technology of the Firefox browser and the Thunderbird email client allows attackers to perform spoofing attacks.

The vulnerability of the XSLT technology implementation in Firefox browsers and the Thunderbird email client is related to incorrect handling of the user interface during the processing of the address bar content. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

Online Employee Leave Management System 1.0 Cross Site Request Forgery

Exploit Title: Online Employee Leave Management System 1.0 - Cross-Site Request Forgery addemployee.php Date: 05/09/2022 Exploit Author: Amolo Hunters Software Link: https://www.sourcecodester.com/php/15374/online-employee-leave-management-system-php-free-source-code.html Version: 1.0 Tested on:...

Spoofing Attack

chromium is vulnerable to spoofing attacks. The vulnerability exist due to an inappropriate implementation in Fullscreen API allowing a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...

GSD-2022-1004950 Redirection of DNS domain in eth.link domain name version 2022-07-31 and later

The eth.link domain name was taken over by a new, unknown, entity on 2022-07-31 "eth.link has expired. Was this your domain name and would like to renew it? Click here to login to your Uniregistry.com account eth.link". The domain currently shows a parked "for sale" page, but an attacker that buy...

Spoofing Attacks

firefox is vulnerable to spoofing attacks. Firefox would have allowed an attacker to coordinate the mouse cursor in different coordinates than displayed...

CVE-2022-1129

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Important: thunderbird

Issue Overview: A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacke...

Important: thunderbird

Issue Overview: crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are...

The vulnerability of Schneider Electric’s Cybersecurity Admin Expert (CAE) software, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of Schneider Electric’s cybersecurity management software, EcoStruxure Cybersecurity Admin Expert CAE, relates to the ability to bypass authentication through spoofing attacks. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...

PT-2022-16189 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.20 Description: The issue allows for authentication bypass by spoofing, potentially enabling unauthorized access. It is related to business logic errors in the login mechanism. Specifically, the log...

Mozilla: A popup window could be resized in a way to overlay the address bar with web content

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a malicious website that creates a popup that could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks...

Mozilla: A popup window could be resized in a way to overlay the address bar with web content

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a malicious website that creates a popup that could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks...

CVE-2022-23719

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...

The vulnerability of the Microsoft Power BI component of the Microsoft On-Premises Data Gateway allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft Power BI local data gateway’s component is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when exiting fullscreen mode, an iframe could have confused the browser about the current state of the fullscreen, resulting in potential user confusion or spoofing attacks...

Mozilla Firefox ESR < 91.10

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-21 advisory. - Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory...

The vulnerability in the notification interface of the fullscreen UI of Firefox browsers, Firefox ESR, and the Thunderbird email client allows attackers to perform spoofing attacks.

The vulnerability of the notification interface in the fullscreen UI mode of Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an error that occurs when reusing existing pop-up windows. Exploiting this vulnerability allows a remote attacker to carry out spoofing...