SAP_RECON

CVE-2020-6287, CVE-2020-6286 SAP RECON 취약점에 대한 PoC Pffff! RECONRemotely Exploitable Code On NetWeaver이라고? 정말? 그게 최고의 코드네임이었어? : 이 스크립트는 SAP LM Configuration Wizard의 인가 확인 누락 취약점을 확인하고, PoC 스크립트로서 queryProtocol 메소드의 디렉토리 트래버설을 악용합니다. 디렉토리 트래버설을 통해 SAP 서버에서 모든 zip 파일을 다운로드할 수 있습니다. 이 프로젝트는 교육 목적으로만...

CVE-2026-15916

Drupal core 's Image module suffers from a missing authorization flaw (forceful browsing) that allows information disclosure of image style derivatives. The module does not sufficiently check access when derivative files are served via a file stream other than private://. The vulnerability is mit...

CVE-2026-16645

Drupal PhotoSwipe (contrib module) contains a missing authorization flaw in its image gallery display formatter that allows forceful browsing of images. The module failed to sufficiently check access permissions when viewing images via the lightbox gallery formatter. Affected versions are < 3....

CVE-2026-7459

CVE-2026-7459 CVE-2026-7459 Simple History: эксплойт захвата учетной записи из-за отсутствия авторизации...

CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"img alt='' src="http:///%5C/%5C/2.gravatar.com%5C/avatar%5C/b58996c504c5638798eb6b511e6f49af?s=32&d=mm&r=g"...

cve-2025-66723

CVE-2025-66723: inMusic Brands Engine DJ =3.0.0 до 4.3.4 раскрывает локальные и сетевые файлы внешним сторонам Краткое описание Программное обеспечение Engine DJ от inMusic Brands содержит встроенный HTTP-сервер для передачи файлов медиатеки подключённым клиентам по сети. Файлы медиатеки...

CVE-2026-79021

CVE-2026-79021 is a missing authorization vulnerability in the InterestGroups feature of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this flaw to bypass system access restrictions using a crafted PDF file. The Chr...

CVE-2026-79058

CVE-2026-79058 is a missing authorization flaw in the Passwords component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process could spoof UI elements by loading a crafted HTML page, potentially misleading the user into interacting w...

CVE-2026-78968

CVE-2026-78968 is a missing authorization flaw in the Core component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially spoof the address bar using a crafted HTML page. The Chromium project rated this vulnerability with a...

CVE-2026-79041

CVE-2026-79041 is a missing authorization vulnerability in the Browser component of Google Chrome on Mac prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass the web origin policy into a privileged page by delivering a crafted HTML page . The Chromium project assi...

CVE-2026-78897

CVE-2026-78897 is a missing authorization vulnerability in the BrowserTag component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can exploit a crafted Chrome extension to obtain sensitive information from the victim. Chromium rates...

CVE-2026-79184

Google Chrome prior to 152.0.7977.65 contains a missing authorization flaw in the Preload component. A remote attacker who had already compromised the renderer process could exploit this to bypass the web origin policy using a crafted HTML page. Chromium rates the severity as Low , consistent wit...

CVE-2026-79085

CVE-2026-79085 is a missing authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass the web origin policy , potentially accessing cross-origin resources that...

CVE-2026-79154

CVE-2026-79154 is a missing authorization flaw in DevTools in Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering could obtain sensitive information through UI Interaction with DevTools. Chromium rates the severity as Medium . The fix is available in Chrome 152....

CVE-2026-79099

Missing authorization in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. The Chromium project classified the severity as Medium . Remediation is available by updating to Chrome 152.0.7977.65 or l...

CVE-2026-78953

CVE-2026-78953 is a missing authorization flaw in the SiteIsolation mechanism of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted PDF file to bypass site isolation, potentially expanding their reach beyond the inten...

CVE-2026-78967

CVE-2026-78967 is a missing authorization flaw in BFCache (Back/Forward Cache) in Google Chrome prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could craft an HTML page to bypass system access restrictions . Chromium rates the severity as Medium . The fix shi...

CVE-2026-79053

CVE-2026-79053 is a missing authorization flaw in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who had already compromised the renderer process and leveraged social engineering could use a crafted HTML page to bypass site isolation , a key security ...

CVE-2026-79208

Missing authorization in HTTP/2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. The vulnerability was rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65 . No exploitation details are provided...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could exploit the issue through a crafted HTML page to potentially bypass system access restrictions...