CVE-2023-23752

CVE-2023-23752 Joomla 무단 액세스 취약점 CVE-2023-23752 취약점 설명 Joomla는 PHP로 작성된 오픈 소스 콘텐츠 관리 시스템CMS으로, MySQL, MSSQL, PostgreSQL 등 여러 데이터베이스 시스템을 지원합니다. 부적절한 액세스 제한으로 인해 서버 REST API 엔드포인트에 대한 무단 액세스가 발생합니다. 영향받는 버전: Joomla 4.0.0 - 4.2.7 사용 도움말 root@kitploit: optional arguments: -h, --help show this help...

CVE-2023-23752

CVE-2023-23752 - Recurrence of Joomla Unauthorized Access Vulnerability 脚本使用 安装python库 pip install -r requirements.txt 漏洞验证 python3 CVE-2022-26134check.py -u url -c whoami 批量扫描 python3 CVE-2023-23752.py -f urlpart.txt 影响版本 4.0.0 = Joomla = 4.2.7 漏洞复现 payload:...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

CVE-2021-42392-Detect

CVE-2021-42392-Detect 소개 이 스크립트는 주어진 IP 목록에서 취약한 H2 서버를 탐지하며, H2 Console 웹 페이지를 식별하고 접근 제한 여부를 확인할 수 있습니다. 사용법 IP 목록이 포함된 파일을 만들고 파일 이름을 IP.txt로 지정한 후, 'IP.txt'와 'h2-detect.py'를 같은 디렉터리에 배치하고 스크립트를 실행하세요. 여기서 "IP.txt"는 스크립트에 하드코딩된 기본 파일 이름이지만, 스크립트는 임의의 파일 이름을 입력 인자로 받을 수도 있습니다. 파일 이름이 지정되지 않으면 현...

SUSE CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69738

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84325

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

CVE-2026-84325

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

CVE-2026-84325

CVE-2026-84325 is an improper input validation vulnerability in the DataTransfer component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can bypass system access restrictions via a co-installed app. Chromium rates this as High severity; the CNA-assigned...

Reachability-Check

리치어빌리티 체크 🌐 EN | TR 브라우저 기반 연결성 검사기 — 네트워크 연결, 방화벽 규칙 및 접근 제한을 테스트합니다. 단일 HTML 파일. 제로 종속성. 실행에 웹 서버가 필요하지 않습니다. 기능 이중 측정: HTTP Fetch + Image Ping 각 서비스 자체 파비콘 사용 서비스 팩: JSON 기반, 커뮤니티 확장 가능 RuleCheck: 기업 네트워크 정책 감사 — 접근 가능해야 함 / 차단되어야 함 + ping 임계값 필터링 및 그룹화: 빠름 / 느림 / 차단됨 필터, 카테고리 / 상태 / 플랫 리스트 보기...

EUVD-2026-69143

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

CVE-2026-79276

A flaw was found in Google Chrome's FileSystem component. This improper privilege management vulnerability allows a remote attacker, leveraging social engineering, to bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page...

CVE-2026-79225

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering techniques through user interface UI interaction...

CVE-2026-79025

A flaw was found in Workers in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by presenting a specially crafted HTML page to the user...

CVE-2026-79137

A flaw was found in Google Chrome Extensions. This incorrect authorization vulnerability allows a remote attacker, leveraging social engineering tactics, to bypass system access restrictions. This can be achieved by tricking a user into installing a specially crafted Chrome extension...

CVE-2026-78892

A flaw was found in Chromoting in Google Chrome. A local attacker can exploit an incorrect authorization vulnerability by running a local program. This allows the attacker to bypass system access restrictions...

Linux Distros Unpatched Vulnerability : CVE-2026-78959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-79226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-79088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access...