Claude-Code-MCP-Injection-PoC

Claude Code: Искажение подтверждения инструмента MCP Профессиональный Proof-of-Concept PoC, демонстрирующий критическую ошибку UI/UX в Anthropic Claude Code. Эта уязвимость позволяет вредоносному MCP-серверу вводить пользователей в заблуждение, заставляя их одобрять выполнение произвольных команд...

CVE-2026-95279

A flaw was found in Chromium. A remote attacker can exploit a user interface UI misrepresentation issue in the Omnibox address bar by convincing a user to visit a crafted HTML page. Successful exploitation allows the attacker to spoof the address bar, potentially misleading users regarding the...

CVE-2025-492025

CVE-2025-492025 보안 권고: CVE-2025-492025 요약 Copilot AI에서 웹 쿼리를 검색할 때마다 "링크 소스link source" 섹션에 의도하지 않은 하이퍼링크가 포함되는 취약점이 확인되었습니다. 이 문제로 인해 사용자는 주제와 무관한 경우에도 https://www.collectingflags.com 링크를 클릭하게 되어, 잘못된 정보를 제공하거나 의도하지 않은 탐색을 유발할 수 있습니다. 영향을 받는 소프트웨어 현재 배포된 모든 CoPilot 인스턴스 취약점 세부 정보 CVE-ID:...

SwaggerUI-CVE-2018-25031

Swagger UI 취약점 공격 - CVE-2018-25031 Swagger UI 공격 - 사용자 인터페이스UI의 중요 정보 왜곡 CVE-2018-25031. 이 공격 도구는 사용 중인 Swagger UI가 사용자 인터페이스UI의 중요 정보 왜곡 취약점에 취약한지 확인합니다. 요구 사항 Python 3 Selenium Chrome Webdriver 처음 사용 Selenium 설치 pip install selenium 저장소 복제 git clone...

CVE-2026-102314

A flaw was found in chromium-browser. A remote attacker could spoof user interface UI elements by convincing a user to visit a specially crafted HTML page. This vulnerability stems from a UI misrepresentation issue within the TabStrip feature, which can be leveraged to mislead users into trusting...

CVE-2026-102305

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by convincing a user to view a specially crafted HTML page. Successful exploitation leads to user interface UI misrepresentation within the sign-in component, allowing the attacker to spoof UI elements and...

CVE-2026-102312

An ui misrepresentation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=551668264 https://code.google.com/p/chromium/issues/detail?id=102312...

Chromium CVE-2026-87597: UI misrepresentation in CustomTabs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93386: UI misrepresentation in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_7435)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257435 advisory. thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-283...

SUSE CVE-2026-102305

UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-102312

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102314

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-102314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium securi...

Linux Distros Unpatched Vulnerability : CVE-2026-102312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-102305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromiu...

DEBIAN-CVE-2026-102314

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-102312

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

CVE-2026-102314

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102312

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...