20593 matches found
CVE-2026-18672
CVE-2026-18672 affects Progress Telerik UI for AJAX prior to v2026.3.812 . The vulnerability resides in the RadImageEditor control, where insufficient validation of client-supplied state allows an unauthenticated, network-based attacker to manipulate which file the control's image cache returns, ...
CVE-2025-492025
CVE-2025-492025 Avis de sécurité : CVE-2025-492025 Résumé Une vulnérabilité a été identifiée dans Copilot AI qui entraîne l'inclusion d'un hyperlien non intentionnel dans la section « source des liens » à chaque fois que Copilot récupère une requête web. Ce problème a conduit les utilisateurs à...
cve-2022-33891
CVE-2022-33891 Vulnérabilité d'injection de commande dans le shell Apache Spark Un POC Python pour exploiter la vulnérabilité d'injection de commande dans le shell Apache Spark. J'ai vu d'autres POC ailleurs, mais ils avaient l'air très suspects. Celui-ci est propre et simple. Je n'ai pas découve...
CVE-2026-53683
FreeIPA Web UI is affected by a client-side open redirect in reset_password.html. The file parses the url query string parameter and assigns it directly to window.location after the password-reset workflow completes, without validation or allowlisting. This allows an attacker to redirect users to...
hayduk
Hayduk Hayduk is a graphical attack management console for Metasploit: the lineage of Armitage, rebuilt as a single Go binary with a browser UI. It drives msfrpcd through go-msf. For authorized security testing only. What you get Live network topology : hosts grouped by subnet, access states, piv...
CVE-2026-73292
CVE-2026-73292 – Changement de mot de passe CSRF dans Semaphore UI À des fins éducatives et de divulgation responsable uniquement. Cette vulnérabilité a été signalée dans GHSA-8cj9-r88m-8945 et affecte les versions de semaphoreui inférieures à 2.18.21. Vulnérabilité Le point de terminaison de...
CVE-2026-40179-PoC
CVE-2026-40179 — хранимый XSS в Prometheus через remotewrite Минимальный proof of concept, почти не требующий зависимостей, для CVE-2026-40179 GHSA-vffh-x6r8-xx99: хранимый межсайтовый скриптинг в веб-интерфейсе Prometheus, доставляемый через неаутентифицированную конечную точку remotewrite...
EUVD-2026-69751
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-69752
Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...
EUVD-2026-69745
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2020-0096-StrandHogg2
Cette faille de conception permet à un attaquant d'afficher ses propres activités pages par-dessus une autre application, ce qui peut amener les utilisateurs à perdre de vue leurs données privées. Cette vulnérabilité est connue sous le nom de StrandHogg 2.0 et a récemment été révélée par la socié...
DEBIAN-CVE-2026-84356
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-84356
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-84330
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-84330
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-84356
An ui misrepresentation flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503787232 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-84330
A flaw was found in Google Chrome on Android. A remote attacker could exploit a user interface misrepresentation in FullScreen mode by crafting a malicious HTML page. This could lead to the spoofing of the address bar, potentially deceiving users about the authenticity of a website...
CVE-2026-84356
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.797...
Linux Distros Unpatched Vulnerability : CVE-2026-84330
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page...