7226 matches found
CVE-2018-12596
CVE-2018-12596 Ektron CMS 9.20 SP2 позволяет удаленным злоумышленникам вызывать aspx-страницы через страницу "activateuser.aspx", даже если страница находится по пути /WorkArea/, который запрещен обычно доступен исключительно локальным администраторам. Публикация Exploit-DB по адресу...
CVE-2026-87548
A flaw was found in the Installer component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper state validation could allow the attacker to bypass system access restrictions, potentially leading to...
dnsresolver
dnsresolver 초고속 DNS 리졸버 목차 설치 사용법 기본 사용법 포트로 호스트 확인 가상 호스트 열거 미해결 도메인 사용 로컬호스트 사용 데모 피드백 라이선스 설치 Rust가 설치되어 있는지 확인한 후, 다음 명령을 실행하여 dnsresolver를 설치하세요. root@kitploit: git clone https://github.com/ethicalhackingplayground/dnsresolver ; cd dnsresolver ; cargo install --path . 사용법 root@kitploit: cat...
EUVD-2026-75973
The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...
DRUPAL-CONTRIB-2026-141
This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange\saml module does not correctly restrict access to certain functionality intended for administrative use. This could allow...
CVE-2026-87429
A flaw was found in the ServiceWorker component of Chromium. A remote attacker, after compromising the renderer process, could exploit a missing authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass system access restrictions...
CVE-2026-87503
A flaw was found in Google Chrome's Downloads component on Android. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to bypass system access restrictions. This could allow the attacker to gain unauthorized access to parts of the system...
CVE-2026-87557
A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...
CVE-2026-87515
A flaw was found in chromium-browser. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to exploit an incorrect authorization vulnerability within the FileAPI component. This could allow the attacker to bypass system access restrictions...
CVE-2026-87556
A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...
CVE-2026-87446
A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...
CVE-2026-87656
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87649
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87641
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87645
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87603
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87603
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87557
Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87546
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Low...