20992 matches found
CVE-2026-78898
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79032
CVE-2026-79032 is an improper input validation flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could bypass system access restrictions by serving a crafted HTML page. Chromium rates the severity as Medium ,...
CVE-2026-79088
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79011
Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation vulnerability in the Browser component. A remote attacker leveraging social engineering can craft an HTML page that misrepresents the browser UI, allowing them to bypass system access restrictions . Chromium classifies the...
CVE-2026-79011
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...
Reachability-Check
Controllo di Raggiungibilità 🌐 EN | TR Controllo di raggiungibilità basato su browser — testa la connettività di rete, le regole del firewall e le restrizioni di accesso. File HTML singolo. Zero dipendenze. Nessun server web necessario per eseguirlo. Caratteristiche Doppia misurazione: HTTP Fetch...
domainhunter
Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...
CVE-2026-20731
A flaw was found in the Intel NPU Driver. Due to improper buffer restrictions, an unprivileged local attacker with authenticated user access could exploit this vulnerability. This could lead to a denial of service DoS condition, impacting the availability of the system. Mitigation No mitigation i...
CVE-2026-56092
CVE-2026-56092 is a Broken Access Control vulnerability in the Apache Solr for TYPO3 – Enterprise Search extension (solr). During indexer sub-requests, the extension forces empty frontend-group and subpage-inheritance restrictions onto page records. This forged state is then persisted into the sh...
CVE-2026-77128 Broken Access Control in extension "Event management and registration" (sf_event_mgt)
The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires on...
EUVD-2026-65347
The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires on...
PT-2026-81619
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in InterestGroups allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted PDF file. Recommendatio...
ipsourcebypass
This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses...
gmailc2
gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...
EUVD-2026-63950
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...
CVE-2026-62940
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...
CVE-2026-49217
Mailu , a mail server distributed as Docker images, is affected by a missing authorization check in its admin REST API prior to version 2024.06.52 . When the REST API is enabled, an unauthenticated remote attacker can remove IP restrictions or modify the comment field on any existing user token v...
CVE-2026-62668
Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, the Grav API plugin WebhookController.php accepts webhook URLs after only FILTERVALIDATEURL syntax validation, and WebhookDispatcher.php initializes cURL without CURLOPTPROTOCO...
The vulnerability of Apache ActiveMQ software lies in the incorrect path name restrictions for the directory, which allows attackers to compromise the confidentiality of the protected information.
The vulnerability of Apache ActiveMQ software products is related to incorrect restrictions on path names to the directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...