UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

MultiPotato

MultiPotato First of all - credit to @splintercode & @decoderit for RoguePotato as this code heavily bases on it. This is just another Potato to get SYSTEM via SeImpersonate privileges. But this one is different in terms of It doesn't contain any SYSTEM auth trigger for weaponization. Instead the...

CVE-2026-121075

Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121055

Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-116352

Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-121240

Improper input validation in the Variations component of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass system access restrictions. This vulnerability is triggered through crafted network traffic . The Chromium security severity is rated as Low . No specific explo...

EUVD-2026-116331

Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-121055

In Google Chrome versions prior to 157.0.8103.38 , an incomplete cleanup vulnerability within DevTools allowed a remote attacker to bypass system access restrictions. This vulnerability can be triggered through a crafted Chrome extension . The chromium security severity is rated as Low . Remediat...

EUVD-2026-116333

Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

EUVD-2026-116314

Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116308

Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121136

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a missing authorization flaw within DevTools . A remote attacker can leverage social engineering and crafted network traffic to bypass system access restrictions. The Chromium security severity is rated as Medium . Remediation is ava...

CVE-2026-121040

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw in the Core component. A remote attacker who has already compromised the renderer process can exploit this issue via a crafted HTML page to bypass system access restrictions. Chromium classifies this s...

CVE-2026-121248

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw in an API. This vulnerability allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension . The Chromium security severity for this issue is rated as Medium . No s...

EUVD-2026-116459

Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-121115

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a vulnerability in the Shopping component due to improper input validation . A remote attacker can use crafted network traffic to bypass system access restrictions and reach a privileged page . No specific exploit details or scanner ...

CVE-2026-121115

Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-116447

Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116443

Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121042: Google Chrome: Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker…

Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...