EUVD-2026-74765

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2026-79636

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2026-20127-Exploit-Extension

执行摘要 CVE-2026-20127 Defensive Companion 是一款卓越的企业级浏览器扩展，专为主动威胁情报与防御性分析而设计。该工具封装了有关 Cisco Catalyst SD-WAN 控制器（vSmart）中身份验证绕过漏洞的权威技术研究。通过提供离线、高度本地化的情报层，它使安全运营中心（SOC）与防御研究人员能够快速分析数据包结构、追踪身份验证流程，并即时提取失陷指标（IOC），而无需将活跃的调查数据暴露给外部网络。 技术背景 Cisco Catalyst SD-WAN 架构依赖 vdaemon 服务在边缘设备与控制器之间建立并维护控制平面的 DTLS...

CVE-2026-60137-With-Skip-SSL

CVE-2026-60137-With-Skip-SSL 添加 --insecure 以跳过 SSL Original-without-skip-ssl : https://github.com/ZephrFish/wp2shell-scanner...

secure-boot-cert-servicing

安全启动证书轮换——评估与服务 一个独立的 PowerShell 脚本，用于评估 Windows 机器的安全启动证书状况，以应对 2011 → 2023 证书轮换（CVE-2023-24932 / KB5025885），并且仅当您明确要求时，才会将该机器注册到 Microsoft 服务管道中。 由 Exchange Technology Services 为自行管理端点的客户和合作伙伴发布。 简要说明 Microsoft 于 2011 年颁发的安全启动证书即将到期，并将被 2023 版本取代。 证书| 日期| 存储| 角色 ---|---|---|--- Microsoft...

CVE-2026-73315

CVE-2026-73315: SSRF through PayPal certificate URL XenForo before 2.3.13 fetches the certificate URL supplied by a PayPal REST webhook without restricting its destination. What happens The callback handler passes PAYPAL-CERT-URL to XenForo's trusted HTTP reader. It does not require a PayPal...

DEBIAN-CVE-2026-87608

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87608

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-87571

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87571

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-87551

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87551

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-87463

Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...

CVE-2026-87463

Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. Chromium security severity: Low...

CVE-2026-87571

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87608

Google Chrome prior to 153.0.8010.36 is affected by an improper certificate validation vulnerability in FedCM (Federated Credential Management). A remote attacker can leverage social engineering and crafted network traffic to bypass the web origin policy , resulting in a confidentiality impact (C...

EUVD-2026-74474

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87608

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87551

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-87571

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...