EUVD-2026-79987

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

CVE-2026-91742

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

CVE-2026-91742

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

CVE-2026-91742

CVE-2026-91742 is a confused deputy vulnerability in the PriceTracking component of Google Chrome on iOS prior to version 153.0.8010.47 . A remote attacker leveraging social engineering and crafted network traffic could bypass system access restrictions to reach a privileged page . The vulnerabil...

CVE-2026-91732

CVE-2026-91732 is a missing authorization vulnerability in the AppManifest component of Google Chrome prior to 153.0.8010.47 . A remote attacker who had already compromised the renderer process and leveraged social engineering could use a crafted HTML page to bypass the web origin policy. Chromiu...

CVE-2026-91732

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Exploit for Use After Free in Linux Linux_Kernel

ghost-hoock A minimal fork of GhostLockhttps://github.co...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 — это критическая уязвимость удаленного выполнения кода в Microsoft Outlook версии, включая Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 до патча февраля 2024 года. Она позволяет неаутентифицированному злоумышленнику обойти защищенный просмотр Outlook, отправив специальн...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Langflow 인증되지 않은 원격 코드 실행 RCE 개요 CVE ID: CVE-2026-33017 영향받는 소프트웨어: Langflow 취약한 버전: = 1.9.0 심각도: 치명적 작성자: r3nsi15 날짜: 2026 설명 Langflow는 공개 플로우 빌드 엔드포인트/api/v1/buildpublictmp/flowID/flow를 노출하며, 인증 없이 임의의 CustomComponent 코드 블록을 수락하고 서버 측에서 실행합니다. 악의적인 Python 페이로드를 CustomComponent...

CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

CVE-2026-5050 – エスケープされていないフィルターによるブラインドLDAPインジェクション プログラムコード（Python + ldap3シミュレーション） root@kitploit: ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role': 'admin', 'user':...

CVE-2020-1472

Сценарий тестирования ZeroLogon Сценарий на Python, использующий библиотеку Impacket для проверки уязвимости к эксплойту Zerologon CVE-2020-1472. Он пытается выполнить обход аутентификации Netlogon. Сценарий немедленно завершится при успешном обходе, не выполняя никаких операций Netlogon. Когда...

NextJS-Exploit-

NextSploit: Сканер и эксплуататор CVE-2025-29927 для Next.js NextSploit — это инструмент командной строки, предназначенный для обнаружения и эксплуатации CVE-2025-29927 , уязвимости безопасности в Next.js. Инструмент сначала определяет, работает ли целевой сайт на Next.js, и проверяет, попадает л...

CVE-2021-44270

CVE-2021-44270 Anviz-Access-Control-Authentication-Bypass https://nvd.nist.gov/vuln/detail/CVE-2021-44270...

CVE-2019-17240

CVE-2019-17240 Эксплойт Версии до 3.9.2 включительно CMS Bludit уязвимы для обхода механизма защиты от брутфорса, который блокирует пользователей, совершивших 10 или более неудачных попыток входа. Уязвимость была обнаружена Rastating. Отправка запроса на вход с изменяющимся значением заголовка...

CVE-2026-68953

CVE-2026-68953 is a missing authentication for critical function vulnerability affecting the Digital Watchdog VMAX DVR and NVR product lineups. Unauthenticated attackers on an adjacent network can send crafted HTTP(S) requests to bypass authentication and disclose sensitive device information, in...

CVE-2026-68953 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...

EUVD-2026-79944

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...

CVE-2026-83077

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

CVE-2026-76684

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading ...

CVE-2026-76688

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...