CVE-2025-21004

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...

CVE-2025-21004

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...

CVE-2025-21004

The CVE-2025-21004 entry concerns Galaxy Watch System UI where improper verification of intents in the broadcast receiver enables a local attacker to power off the device. Affected scope is Galaxy Watch devices running firmware prior to the SMR Jul-2025 Release 1. The underlying issue is insuffic...

PT-2025-28506

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client affected versions not specified Description: The issue is related to insufficient UI warnings for dangerous operations in Remote Desktop Client, allowing an unauthorized attacker to perform spoofing over a network. This...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing.

A vulnerability was found in WebKitGTK and WPE WebKit that allows a remote attacker to conduct spoofing attacks by exploiting improper UI handling. This flaw enables attackers to create specially crafted websites that can display misleading information to users. By exploiting this vulnerability, ...

MAL-2025-5648 Malicious code in jenkins-for-jira-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6219412d635487c17cb5e33f5085c2fced525cf0f510f8df2728d299f028f Any computer that has this package installed or running should be considered...

Malicious code in confluence-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb63632dfb2a63f6c418382e8084ef144345f9f1ffc39d5980bacfc336cf09ab Any computer that has this package installed or running should be considered...

MAL-2025-5680 Malicious code in confluence-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb63632dfb2a63f6c418382e8084ef144345f9f1ffc39d5980bacfc336cf09ab Any computer that has this package installed or running should be considered...

CVE-2025-20310

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

Malicious code in ca-ui-carbon-toolkit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fe942358c29b14aaa3755810e04ffe2cd696331434ed03a940060449bb9d05 Any computer that has this package installed or running should be considered...

MAL-2025-5673 Malicious code in ca-ui-carbon-toolkit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fe942358c29b14aaa3755810e04ffe2cd696331434ed03a940060449bb9d05 Any computer that has this package installed or running should be considered...

CVE-2025-53104

gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS NativeWind. Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fields title, body, etc. were directly...

CVE-2025-53096

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Clickjacking attacks. This vulnerability allows an attacker to embed the Sunshine interface within a malicious website using an invisible or disguised iframe. ...

CVE-2025-2141

IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI...

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Telerik We...

CVE-2025-20310

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

CVE-2025-20310 Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

CVE-2025-20310

CVE-2025-20310 : Cisco Enterprise Chat and Email (ECE) web UI vulnerability where input in the interface is not properly validated, enabling a stored XSS attack. An unauthenticated, remote attacker could lure a user to click a crafted link, potentially executing arbitrary script in the user’s bro...

Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

CVE-2025-53104

gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS NativeWind. Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fields title, body, etc. were directly...