The vulnerability in the implementation of the SMB protocol in Microsoft Windows operating systems allows a hacker to perform a spoofing attack.

The vulnerability of the SMB protocol implementation in Microsoft Windows is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...

BIT-DOTNET-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

CVE-2025-49760

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...

CVE-2025-49760

Technical details about CVE-2025-49760 are not publicly provided in the supplied documents. No affected products, CVSS specifics, or remediation are confirmed here. Monitor for updates from official advisories (e.g., MSRC) for concrete information.

Microsoft Windows SMB Server 信任管理问题漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft USA. It allows applications on a computer to read and write files and request services from server programs on a computer network. A vulnerability exists in Microsoft Windows SMB Server for trust management issues. An...

Microsoft Remote Desktop Client 安全漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft USA. A security vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Windows 11 Version 22H2 for...

ROS-20250703-08

A vulnerability in the Thunderbird email client is related to incorrect processing of the p2-from header. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to...

TencentOS Server 2: firefox (TSSA-2024:0382)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0382 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

GPS Spoofing Attacks on AI-Based Navigation Systems with Obstacle Avoidance in UAV

Recently, approaches using Deep Reinforcement Learning DRL have been proposed to solve UAV navigation systems in complex and unknown environments. However, despite extensive research and attention, systematic studies on various security aspects have not yet been conducted. Therefore, in this pape...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Window...

Spoofing Attack

org.springframework.cloud, spring-cloud-gateway-server is vulnerable to Spoofing Attack. The vulnerability is due to insufficient validation of X-Forwarded-For and Forwarded headers from untrusted proxies, allowing attackers to spoof client IP addresses...

The vulnerability of VideoGrace video conferencing software, related to insufficient verification of input data, allows a hacker to perform spoofing attacks.

The vulnerability of VideoGrace video conferencing software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to perform a spoofing attack...

CVE-2024-54158

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding...

CVE-2023-51350

A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the header...

CVE-2023-36673

An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel, even if this traffic is not generated by the VPN client, while...

CVE-2021-43999

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user...

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

CVE-2025-47779 Using malformed From header can forge identity with ";" or NULL in name portion

Asterisk is an open-source private branch exchange PBX. Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE RFC 3428 authentication do not get proper alignment. An authenticated attacker...

CVE-2025-47779

CVE-2025-47779 affects Asterisk and certified-asterisk where SIP MESSAGE authentication requests can be misaligned, enabling an authenticated attacker to spoof a user identity and send spam/fake chat messages that appear to come from trusted entities. Impact includes potential social engineering ...