SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...

CVE-2026-87631

Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87631

Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74467

Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74461

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74440

Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87511

CVE-2026-87511 is a missing authorization flaw in DevTools within Google Chrome prior to 153.0.8010.36 . A remote attacker could leverage a crafted Chrome extension to obtain cross-origin data . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.36 . No...

CVE-2026-87543

CVE-2026-87543 is a missing authorization vulnerability in the Core component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass site isolation , potentially gaining access to other site...

EUVD-2026-74444

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-74441

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-87522

CVE-2026-87522 is a missing authorization vulnerability in the WebView component of Google Chrome on Android , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering could potentially bypass system access restrictions via crafted network traffic. The Chromium ...

CVE-2026-87429

CVE-2026-87429 is a missing authorization vulnerability in the ServiceWorker component of Google Chrome prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could exploit this flaw via a crafted HTML page to bypass system access restrictions . The Ch...

EUVD-2026-74433

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74407

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87431

CVE-2026-87431 is a missing authorization vulnerability in the Extensions component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain sensitive information by delivering a crafted Chrome extension to the victim. Chromium assigns a Medium security severi...

CVE-2026-87493

CVE-2026-87493 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to 153.0.8010.36 . A remote attacker leveraging social engineering can bypass system access restrictions by delivering a crafted HTML page to the victim. Chromium rates this as Medium severi...

EUVD-2026-74406

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-87622

CVE-2026-87622 is a missing authorization vulnerability in FedCM (Federated Credential Management) within Google Chrome prior to version 153.0.8010.36 . The flaw allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. Chromium assigned a Medium security severi...