970 matches found
The vulnerability of the Google Chrome browser’s Navigation function, which allows a hacker to perform a spoofing attack
The vulnerability of Google Chrome’s Navigation function exists due to insufficient verification of data entered by users. Exploiting this vulnerability allows a malicious actor to carry out a spamming attack using a specially created web page...
PT-2023-2203 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a tampering vulnerability in Microsoft Edge, where errors in the user interface's representation of information can be exploited. This can allo...
The vulnerability of Google Chrome and Microsoft Edge browsers’ Intents function allows attackers to perform spoofing attacks.
The vulnerability of Google Chrome and Microsoft Edge’s Intents function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...
The vulnerability of the Internals component of Google Chrome and Microsoft Edge browsers allows attackers to carry out spoofing attacks.
The vulnerability of the Internals component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...
The vulnerability of the Azure Service Fabric distributed system, related to errors in information representation by the user interface, allows a hacker to perform a spoofing attack.
The vulnerability of the Azure Service Fabric distributed system is related to errors in information representation by the user interface. Exploiting this vulnerability may allow a malicious actor to perform a spoofing attack remotely...
The vulnerability of the WebApp components of Google Chrome and Microsoft Edge allows attackers to carry out spoofing attacks.
The vulnerability of the WebApp components of Google Chrome and Microsoft Edge is related to the improper implementation of security checks for standard elements during the loading process. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a speciall...
The vulnerability in the full-screen mode of the Mozilla Firefox browser, which allows a hacker to execute a spoofing attack
The vulnerability of the full-screen mode of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code issue vulnerability that stems from the fact that by displaying a prompt with a long description, a full-screen notification may be hidden, which can be exploited by...
PT-2023-1780 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Excel, allowing an attacker to conduct spoofing attacks. This can affect the...
PT-2023-1867 · Microsoft · Azure Service Fabric
Name of the Vulnerable Software and Affected Versions: Azure Service Fabric affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Azure Service Fabric platform. Exploitation of this issue may allow a remote...
PT-2023-1763
Name of the Vulnerable Software and Affected Versions Office for Android affected versions not specified Description The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow an attacker to conduct spoofing attacks...
Spoofing Attack
Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Fullscreen API, which allows an attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
Spoofing Attack
Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists in the Download, which allows an attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page...
PT-2023-2080
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 111.0.5563.64 Microsoft Edge affected versions not specified Description The issue is related to the incorrect implementation of security checks for standard elements in the Intents function of Google Chrome and...
K63675293: NTP vulnerability CVE-2016-1548
Security Advisory Description An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c wi...
SUSE CVE-2007-5334
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute...
SUSE CVE-2010-1206
The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is...
SUSE CVE-2011-2514
The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...
SUSE CVE-2016-2114
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream...