Yandex Lite IDN Spoofing

The vulnerability of the Yandex Browser Lite browser for Android is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to remotely replace values in the address bar using IDN spoofing techniques...

Microsoft Power BI Component Spoofing

The vulnerability of the Microsoft Power BI local data gateway’s component is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Windows Autopilot Spear Phishing

The vulnerability of the client software for installing and preliminarily configuring new devices under Windows Autopilot of the Microsoft operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform...

Malicious code in merlin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d7dcf4fcdd9219988153659111f9f161edaceb483c6642ac3ef3c334038c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in music-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3e5a29f1e03c908a98561322b9a9d17c15b951f7e1a38ae5f4c3d82eb29ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6864 Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in user-interface-kit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in turicreate-user-interface

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in turicreate-user-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66815d0d6c4ce398580f69bbe13619f1625d74b8e19c5389f6157479e1f1b3d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6682 Malicious code in turicreate-user-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66815d0d6c4ce398580f69bbe13619f1625d74b8e19c5389f6157479e1f1b3d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shared-ui/global-navigation-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3146f75b07c94a8fd45a30d06312fef2e4562d93ab98b0e3eb67da5051b5082e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @idse/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf8a80088e5eda0a3d5b7faca5cd4f36b1cc98345a383d657e4313e765efb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bigid-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4155acf29ddb0adae2f2336b9511dcc46c60cb1f01b63e0aa629c87130a81c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UI Redressing

Description The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Proof of Concept 1. Go to this URL:...

Oracle E-Business Suite Region Mapping Sub-component Data Access

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, ...

Skype for Business Server Spoofing

The vulnerability of Skype for Business Server’s corporate communication servers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

Oracle Collaborative Planning UI Data Access Modification

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning product, a business automation system within the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...