5374 matches found
Super-UEFIinSecureBoot-Disk
Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...
CVE-2024-0311
CVE-2024-0311 ? This is a PoC for what I believe is CVE-2024-0311, SB10418. A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Much details. Very exploit. Β―\γ /Β― The PoC injects into a user-ran SCPBypass.exe process and writes to the...
WebKit-NavigationAPI-SOP-Bypass
WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API β Same-Origin Policy bypass via cross-port interception CVE-2026-20643 | ---|--- CVE| CVE-2026-20643 Discovered by| Thomas Espach WebKit Bugzilla 306050 Component| WebKit β WebCore::Navigation::innerDispatchNavigateEvent Affected| iOS 26.3.1...
CVE-2019-14287-IT18030372-
CVE-2019-14287-IT18030372- Sudo Security Policy bypass Vulnerability...
SUSE SLES12 Security Update : openssh (SUSE-SU-2026:4686-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4686-1 advisory. - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after- free bsc1275074. -...
CVE-2026-100803
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the WebExtensions component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...
CVE-2026-62201-OpenClaw-SSRF
CVE-2026-62201 β OpenClaw Sandbox Exec-Server Network Policy Bypass SSRF Severity: High Β· CVSS: 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Β· CWE-918 Server-Side Request Forgery Vulnerability at a Glance Field| Value ---|--- Advisory| GHSA-mgvr-6gvw-3rgr NVD| CVE-2026-62201 Product| OpenClaw...
CVE-2025-62506
CVE-2025-62506 Vulnerability Verification Script Overview This repository contains a verification script for CVE-2025-62506, a privilege escalation vulnerability in MinIO service accounts and STS Security Token Service accounts. Vulnerability Description CVE-2025-62506 is a privilege escalation...
CVE-2026-108334 Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides
A flaw was found in the internal WebAssembly WASM shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create o...
CVE-2026-108334
A flaw in the Kuadrant operator internal WebAssembly (WASM) shim allows for Expression Language Injection (CWE-917). When generating CEL predicates for Gateway-level authentication and rate limiting, the shim fails to correctly escape values from HTTPRoute match fields. An attacker with permissio...
Astra Linux β Vulnerability in Chromium
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257...
Sudo-Vulnerability-Exploit-CVE-2019-14287
Sudo-Vulnerability-Exploit-CVE-2019-14287 Sudo has been discovered to be unreliable, one of the most significant, powerful, and commonly used utilities installed in almost any Unix and Linux based operating system as a simple command. A pseudo security policy bypass flaw that allows arbitrary...
Security update for openssh
This update for openssh fixes the following issues: CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074. CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses...
PYSEC-2026-4250 PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend
Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports. Its strict classmethod is explicitly described as creating "a...
EUVD-2026-101086
Gitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts. A restricted user can enumerate and download those packages despite the visibility policy that should prevent this access. The issue affects...
CVE-2026-60010
Gitea versions
CVE-2026-60010 Gitea organization team policy bypass through repository API
Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changin...
CVE-2026-60010 Gitea organization team policy bypass through repository API
Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changin...
CVE-2026-60010
Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changin...