Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 Die CVE-2020-35489 wurde im WordPress-Plugin Contact Form 7 5.3.1 und älteren Versionen entdeckt. Durch Ausnutzung dieser Sicherheitslücke können Angreifer Dateien beliebigen Typs hochladen und dabei alle Einschränkungen umgehen, die bezüglich der erlaubten...

CVE-2024-40725

Werkzeug zur Erkennung von HTTP Request Smuggling Dieses Repository enthält ein auf Python basierendes Werkzeug, um HTTP Request Smuggling-Sicherheitslücken zu erkennen, die speziell auf CVE-2024-40725 abzielen. Das Werkzeug versucht, diese Sicherheitslücke im Apache HTTP Server auszunutzen, inde...

CVE-2023-44061

Umgehung von Datei-Upload-Einschränkungen...

ipsourcebypass

Este script Python pode ser usado para contornar restrições de origem IP usando cabeçalhos HTTP. Recursos 17 cabeçalhos HTTP. Multithreading. Exportação JSON com --json outputfile.json. Detecção automática dos bypasses mais bem-sucedidos...

CVE-2026-79017

CVE-2026-79017 is a race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage a crafted Chrome extension to bypass system access restrictions . Chromium rates the security severity as Low . The fix is available in Chrome 152.0.7977.65 (S...

CVE-2026-79225

CVE-2026-79225 is an incorrect authorization vulnerability in Google Chrome for Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass system access restrictions through UI Interaction . Chromium rates the security severity as Low . The fix is included in ve...

CVE-2026-79077

CVE-2026-79077 is an incorrect authorization vulnerability in WebProtect in Google Chrome prior to 152.0.7977.65 . A remote attacker could bypass system access restrictions by delivering a crafted HTML page to the user. The Chromium team rated the security severity as Low . The fix is available i...

CVE-2026-79211

CVE-2026-79211 is an incorrect authorization vulnerability in the USB subsystem of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could bypass system access restrictions by delivering a crafted HTML page to a victim. The Chromium security team rates the ...

CVE-2026-79003

CVE-2026-79003 is an incorrect authorization vulnerability in the Device component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could exploit this via a crafted HTML page to bypass system access restrictions . Chromium assigned a M...

CVE-2026-78959

Google Chrome prior to 152.0.7977.65 contains a vulnerability in the FileSystem component caused by improper handling of case sensitivity . A remote attacker, leveraging social engineering , can bypass system access restrictions by delivering a crafted HTML page. The Chromium security severity is...

CVE-2026-79099

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium project classified the severity as Medium . Remediation is available by updating to Chrome 152.0.7977.65 or l...

CVE-2026-79094

CVE-2026-79094 is a race condition in the Workers component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass system access restrictions . Chromium assigned it a Medium security severity. The fix is available in ...

CVE-2026-79151

An improper input validation vulnerability in the Safebrowsing component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Rated Medium severity by Chromium, the flaw enables remote exploitation, though specific user...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in BFCache (Back/Forward Cache) in Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could craft an HTML page to bypass system access restrictions . Chromium rates the severity as Medium . The fix shi...

CVE-2026-79143

Incorrect authorization in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker , leveraging social engineering , to bypass system access restrictions via a crafted HTML page. The Chromium security severity is rated Medium . The fix is included in Chrome 152....

CVE-2026-79049

CVE-2026-79049 is a medium-severity vulnerability in Google Chrome's Passwords component, caused by an incorrect reference resolution that allowed a remote attacker to bypass system access restrictions via a crafted file. The flaw affected Chrome versions prior to 152.0.7977.65 , where a fix was ...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could exploit the issue through a crafted HTML page to potentially bypass system access restrictions...

CVE-2026-79226

Google Chrome prior to 152.0.7977.65 is affected by an improper privilege management flaw in the Regional Capabilities component. A remote attacker leveraging social engineering can exploit this through a crafted Chrome extension to bypass system access restrictions . Chromium rates the severity ...

CVE-2026-79067

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass system access restrictions via a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. The attac...

CVE-2026-79088

An incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to bypass system access restrictions by delivering a crafted HTML page. The Chromium project rated the issue as Medium severity. The fix i...