Super-UEFIinSecureBoot-Disk

超级UEFI安全启动盘 Super UEFIinSecureBoot Disk 是一个概念验证（未积极维护或增强）的可启动映像，带有GRUB2引导加载程序，旨在用作恢复USB闪存盘的基础。 关键特性： 该磁盘在启用UEFI安全启动模式下完全可用。它可以启动任何操作系统或.efi文件，即使签名不受信任、无效或缺失。 特性： GRUB2 Bootloader 支持32位（ia32）/64位（x8664）UEFI（+安全启动） 支持BIOS / UEFI CSM 启动任何操作系统 从GRUB2启动任何.efi可执行文件 从另一个.efi应用程序启动任何.efi可执行文件 加载任何UEFI驱动程...

CVE-2026-100663

A flaw was found in Netty's HTTP/3 codec netty-codec-http3. A remote attacker can bypass security policies and tunnel allowlists when Netty acts as an HTTP/1 to HTTP/3 proxy or gateway. Due to improper translation of HTTP/1 CONNECT requests, the component uses the attacker-controlled Host header ...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Parser component in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy through a crafted HTML page. Chromium security severity: Low...

CVE-2019-14287-IT18030372-

CVE-2019-14287-IT18030372- Sudo Security Policy bypass Vulnerability...

CVE-2026-12974

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...

EUVD-2026-85292

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...

CVE-2026-12974

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW) . This issue affects versions 7.1.0 through 7.1.13 , 7.3.0 through 7.3.1 , 7.3.3 , 7.4.0 through 7.4.1 , and 7.5.0 . While the CVE is associated with Improper Validation of Specified Quantity in Input , specific te...

CVE-2026-12974: Improper Validation of Specified Quantity in Input

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...

CVE-2026-77912 Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

SUSE CVE-2026-73551

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.39 security and extras update

Red Hat OpenShift Container Platform release 4.20.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

Linux Distros Unpatched Vulnerability : CVE-2026-93568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier URI hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policie...

EUVD-2026-62535

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter CVE-2026-44738 bypass...

fast-uri: fast-uri: Host confusion via skipped IDN canonicalization

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names IDN to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an...

CVE-2026-43670: Protection Mechanism Failure

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...