2811 matches found
CVE-2025-24071-PoC
CVE-2025-24071 - Windows エクスプローラーのなりすまし脆弱性 概念実証 概要 CVE-2025-24071 は、Windows エクスプローラーにおけるなりすましの脆弱性であり、認証されていない攻撃者がネットワーク経由で機密情報を漏洩させる可能性があります。この脆弱性は、Windows エクスプローラーにおける .library-ms ファイルに対する暗黙の信頼と自動解析動作に起因します。悪意のあるアーカイブファイル（例：RAR/ZIP）に、埋め込まれた SMB パスを持つ .library-ms ファイルを仕込むことで、攻撃者は展開時に SMB...
CVE-2026-69857
Azure Cosmos DB is affected by an authorization bypass through user-controlled key , allowing an authorized attacker to perform spoofing over a network. The vulnerability is rated CVSS 3.1: 8.5 (HIGH) with a vector of CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed scope and hi...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to spoofing vulnerabilty in MSSQL JDBC driver (CVE-2025-59250)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed MSSQL JDBC driver vulnerability Vulnerability Details CVEID:CVE-2025-59250 DESCRIPTION: Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-74975
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...
CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability
...
Windows Remote Help Defense Spoofing Vulnerability
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
CVE-2026-74975
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154...
Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review
The August 2026 Microsoft Patch Tuesday release delivers security fixes for vulnerabilities affecting a wide range of Microsoft products and services. As attackers continue to exploit unpatched vulnerabilities, timely patching remains critical for reducing exposure and strengthening enterprise...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902
CVE-2026-64902 affects Microsoft Office SharePoint. It arises from improper neutralization of input during web page generation, enabling spoofing by an authorized attacker over a network. CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N; base score 4.6 (Medium). Exploitation status and concrete reme...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-65660
CVE-2026-65660 is a code injection vulnerability in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network, per the NVD entry. Microsoft's own advisory characterizes the impact as remote code execution . The Microsoft CNA CVSS 3.1 score is 8.8 (High) , w...
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-70332
CVE-2026-70332 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an unauthorized attacker to perform network spoofing. The connected sources consistently identify SharePoint as affected and report SSRF as the underlying issue, with related entries also refe...