CVE-2026-48549

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...

android-hardware-attestation-demo

Bypass dell'attestazione hardware Android — demo Questo repository accompagna un articolo di Quarkslab sull'attestazione delle chiavi hardware Android e serve a illustrarla. È una piccola prova di concetto end-to-end che mostra un semplice bypass: un analista su un telefono rooted supera il...

CVE-2026-79068

A flaw was found in Google Chrome's StreamsAPI. A remote attacker could exploit improper resource exposure by crafting a malicious HTML page. This could potentially allow the attacker to bypass the web origin policy and gain access to a privileged page...

CVE-2026-79067

A flaw was found in the Network component of Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows them to bypass system access restrictions by using a specially crafted HTML page...

CVE-2026-79049

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Passwords component, allows a remote attacker to bypass system access restrictions by providing a specially crafted file. This could lead to unauthorized access to sensitive system resources...

CVE-2026-79051

A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79002

A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...

CVE-2026-78943

A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...

CVE-2026-79213

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker can exploit this incorrect authorization vulnerability by crafting a malicious HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized actions on the device...

CVE-2026-79211

A flaw was found in Google Chrome's USB component. This incorrect authorization vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79205

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the browser's Network component allows a remote attacker to bypass the web origin policy. By enticing a user to open a specially crafted HTML page, an attacker could potentially gain unauthorized access to sensitive...

CVE-2026-79203

A flaw was found in DevTools in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the browser's rendering process, to bypass site isolation. Site isolation is a security feature designed to protect sensitive information by ensuring that content from...

CVE-2026-79201

A flaw was found in Chromium. Improper access control in the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actions...

CVE-2026-79191

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the SiteIsolation feature allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by tricking a user into interacting...

CVE-2026-79178

A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys component, related to incorrect authorization. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to bypass the web origin polic...

CVE-2026-79094

A flaw was found in the Workers component of Google Chrome. This race condition vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, an attacker can exploit this flaw, leading to unauthorized access within the system...

File-Tunnel

File Tunnel Instrada connessioni TCP attraverso un server di file. Un elenco completo dei file system supportati è disponibile qui. Download Eseguibili portatili per Windows, Linux e Mac sono disponibili nella sezione release. Esempio 1 - Bypassare un firewall Vorresti connetterti dall'Host A...

CVE-2026-3035 Authentication Bypass Using an Alternate Path or Channel in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have accessed the terminal of a protected environment they were no...

EUVD-2026-66426

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Bypass dell'autenticazione remota Seriamente, telnet nel 2026? Andiamo, ragazzi, è ora di passare oltre. SSH esiste dal 1995. 🤦 Descrizione Una vulnerabilità critica di bypass dell'autenticazione in GNU Inetutils telnetd che interessa le versioni da 1.9.3 a 2....