CVE-2026-106244

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106242

Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106242

A flaw in the Omnibox (address bar) component of Google Chrome on Android prior to version 155.0.8059.39 allows for an information leak. A remote attacker can exploit this by leveraging social engineering techniques to transmit crafted network traffic , which may result in the disclosure of sensi...

EUVD-2026-93678

Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106267

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93670

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106267

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106267

A missing authorization flaw exists in the Network component of the Chromium browser, affecting versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . Remediation is available in version 155.0.805...

EUVD-2026-93810

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106214

Google Chrome on Windows is vulnerable to an information leak within the Proxy component in versions prior to 155.0.8059.39 . An adjacent attacker can leverage crafted network traffic to obtain sensitive information from the victim system. The vulnerability has been assigned a High security sever...

EUVD-2026-93809

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106214

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup in Proxy Auth . This flaw allows an adjacent attacker to obtain sensitive information by sending crafted network traffic. No specific exploit details or mitigation steps beyond the version update are provided in...

CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener

A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...

CVE-2026-83550

A flaw in postgres-exporter exposes debug endpoints on the unauthenticated metrics listener due to a blank import of net/http/pprof . A remote attacker within the cluster network can access these endpoints to perform information disclosure , potentially uncovering process arguments, goroutine sta...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

sockstress

sockstress Sockstress CVE-2008-4609 implémentation en Go Installation go get github.com/marcelki/sockstress Utilisation Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g...

CVE-2025-71383

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...