ROS-20250826-03

Vulnerability of WEBrick library of Ruby programming language interpreter is related to incorrect checking of HTTP requests in the readheader method. HTTP requests in the readheader method. Exploitation of the vulnerability could allow an attacker, acting remotely, to perform HTTP request spoofin...

A Survey of Threats against Voice Authentication and Anti-Spoofing Systems

Voice authentication has undergone significant changes from traditional systems that relied on handcrafted acoustic features to deep learning models that can extract robust speaker embeddings. This advancement has expanded its applications across finance, smart devices, law enforcement, and beyon...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is an extended support version of Firefox web browser. A spoofing vulnerability exists in several Mozilla products and is caused due to an error in the address bar component. An attacker coul...

Microsoft Windows File Explorer Spoofing Vulnerability

Microsoft Windows File Explorer is a file manager application from Microsoft USA. A spoofing vulnerability exists in Microsoft Windows File Explorer that is caused by the exposure of sensitive information to unauthorized participants in File Explorer. An attacker could exploit the vulnerability t...

CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability

...

Microsoft Azure 访问控制错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure Virtual Machines. An attacker could exploit this vulnerability to perform spoofing attacks. The following products and...

Microsoft Windows Security Center 安全漏洞

Microsoft Windows Security Center is a security center of Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Security Center. An attacker exploits the vulnerability to perform spoofing attacks...

Linux Distros Unpatched Vulnerability : CVE-2022-45420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting in potential user...

Linux Distros Unpatched Vulnerability : CVE-2023-29533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval...

Linux Distros Unpatched Vulnerability : CVE-2023-29534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and...

CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA, on July 22, 2025, added two Microsoft SharePoint flaws, CVE-2025-49704 and CVE-2025-49706, to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. To that end, Federal Civilian Executive Branch...

PT-2025-30267 · Recursor +1 · Recursor +1

Name of the Vulnerable Software and Affected Versions: versions prior to the updated version Description: An attacker spoofing responses to ECS-enabled requests sent by the Recursor may succeed. The updated version includes mitigations against spoofing attempts of ECS-enabled queries by chaining...

Unspecified Vulnerability in Microsoft Windows (CNVD-2025-16774)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. The vulnerability is exploited by attackers to perform spoofing attacks...

The vulnerability of the client of the Remote Desktop Client for Microsoft Windows operating systems allows a perpetrator to carry out spoofing attacks.

The vulnerability of the Remote Desktop Client for Microsoft Windows operating systems relates to the absence of warnings about dangerous actions. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. The vulnerability is exploited by attackers to perform spoofing attacks...

webkitgtk: Visiting a malicious website may lead to address bar spoofing

A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website...

ROS-20250703-07

A vulnerability in the DevTools component of the Google Chrome browser is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the libvpx library of the Google Chrome and Microsoft Edge...

Microsoft Edge (Chromium-Based) < 138.0.3351.55 Multiple Vulnerabilities (Jun 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-27017 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: A spoofing issue allows unauthorized attackers to perform spoofing over a network, potentially affecting the system. Recommendations: At the moment, there is no...

The vulnerability of the Thunderbird email client, related to errors in information representation by the user interface, allows attackers to perform spoofing attacks.

The vulnerability of the Thunderbird email client is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to carry out spoofing attacks...