CVE-2026-102777

The Joomla Extension - svenbluege.de Event Gallery extension (versions

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778

The Joomla Extension - svenbluege.de (Event Gallery extension) is vulnerable to Cross-Site Scripting (XSS) and Open Redirect in versions prior to 6.6.0 . When the "Share article links" option is enabled, the share mini page takes the article address from a shared link and prints it into the page ...

CVE-2026-102776

The Joomla Extension - svenbluege.de 's Event Gallery extension (versions

EUVD-2026-92451

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

webauthn_tpm_portable

WebAuthn TPM 便携式凭证 ⚠️ 早期概念验证。 本项目尚未经过全面测试或审计。请勿将其用于实验之外的任何用途。 便携式、硬件支持的 WebAuthn/通行密钥凭证，使用 TPM 2.0 在多个设备上工作。 传统的TPM凭证被锁定在创建它们的设备上。本项目通过将确定性父密钥（从主种子派生）导入每个设备的TPM使其便携化。一个TPM加密的凭证blob可以被其他拥有相同种子的TPM加载和使用。私有签名密钥由TPM为每个凭证随机生成，且永远不会以明文形式存在于硬件之外。 主种子仅在每个设备配置时使用一次。此后，所有加密操作完全在TPM内部进行。 工作原理 浏览器扩展覆盖...

CVE-2018-6574

CVE-2018-6574 在 Golang 的 go get 命令中的远程命令执行。 CVE-2018-6574 此漏洞影响 Golang 的 go get 命令，并允许攻击者通过安装恶意库在系统上获得代码执行权限。此漏洞已在 Go 1.8.7、1.9.4 和 1.10rc2 中修复。 Golang 会构建原生扩展。这可用于向编译器传递额外标志以获得代码执行。例如，可以使用 CFLAGS。...

POC-CVE-2024-6778

CVE-2024-6778 该仓库包含针对 CVE-2024-6778 的概念验证漏洞利用代码，这些是 Chromium 网页浏览器中允许通过浏览器扩展实现沙箱逃逸的漏洞。要运行这些漏洞利用程序，你需要一个版本低于 126.0.6478.54 的 Chromium。 相关文章：https://ading.dev/blog/posts/chromesandboxescape.html 漏洞报告：https://issues.chromium.org/issues/338248595 CVE-2024-6778 目录包含一个概念验证的 Chrome 扩展，可以在特权 WebUI 页面上执行任...

CVE-2026-58480

CVE-2026-58480 — RCE por Subida de Archivos No Autenticada en Blocksy Companion Pro Advanced Reviews → saveattachments → Bypass de strpos en Custom Fonts → shell.woff2.php Resumen CVE-2026-58480 también registrada como CVE-2026-15158 es una vulnerabilidad crítica CVSS 9.8 de subida arbitraria de...

CVE-2015-10141

CVE-2015-10141 Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 说明 Xdebug 2.5.5 及更早版本（一个 PHP...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using Tab Strip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.101, using “After Free” in Google Chrome extensions allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed a warning in ext4handleinodeextension We encountered the following issues: EXT4-fs error device loop0 in ext4reserveinodewrite:5741: Out of memory EXT4-fs error device loop0: ext4setattr:5462: inode 13: comm...

Astra Linux – Vulnerability in PHP 7.3

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15, and 8.0.x below 8.0.2, when using the SOAP extension to connect to a SOAP server, a malicious SOAP server may return malformed XML data as a response. This could cause PHP to access a null pointer, resulting in a crash...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape through a crafted Chrome Extension...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in Chromoting within Google Chrome on Linux prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a malicious Chrome Extension. Chromium security severity: Mediu...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Medium...