WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass API de navigation WebKit — Contournement de la Same-Origin Policy via interception inter-ports CVE-2026-20643...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk هو صورة إقلاع إثبات مفهوم غير مُدارة أو مُحسَّنة بنشاط مع مُحمِّل الإقلاع GRUB2 مصممة لاستخدامها كقاعدة لأقراص USB لاستعادة النظام. الميزة الرئيسية: يعمل القرص بكامل وظائفه مع وضع الإقلاع الآمن UEFI Secure Boot المُفعَّل. يمكنه تشغيل أي نظام...

CVE-2024-0311

CVE-2024-0311 ? Ceci est un PoC pour ce que je pense être CVE-2024-0311, SB10418. Un initié malveillant peut contourner la politique existante de Skyhigh Client Proxy sans code de déblocage valide. Beaucoup de détails. Très exploit. ¯\ツ /¯ Le PoC injecte dans un processus SCPBypass.exe lancé par...

CVE-2026-85044

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-85044

A flaw was found in Google Chrome on Android. This vulnerability involves the improper use of a released resource, which could allow a remote attacker to bypass the web origin policy. The web origin policy is a security mechanism that prevents malicious websites from interacting with legitimate...

CVE-2026-85044

CVE-2026-85044 is a use of released resource flaw in the Mobile component of Google Chrome on Android (versions prior to 152.0.7977.82 ). A remote attacker, leveraging social engineering and a crafted HTML page, can bypass the web origin policy , allowing unauthorized cross-site interaction with ...

EUVD-2026-64014

Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/shell.py...

EUVD-2026-62535

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter CVE-2026-44738 bypass...

EUVD-2026-64758

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references...

EUVD-2026-64772

fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization...

EUVD-2026-64763

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding...

EUVD-2026-64773

fast-uri vulnerable to host confusion via percent-encoded scheme normalization...

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

Contournement de la politique de mots de passe de Digisol-DG-GR1321 - CVE-2024-2257...

SUSE CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84355

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

CVE-2019-14287-IT18030372-

CVE-2019-14287-IT18030372- Уязвимость обхода политики безопасности Sudo...

Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo-Vulnerability-Exploit-CVE-2019-14287 Sudo s'est avéré peu fiable, l'un des utilitaires les plus importants, les plus puissants et les plus couramment utilisés, installé dans presque tous les systèmes d'exploitation basés sur Unix et Linux comme simple commande. Une faille de contournement de...

CVE-2025-62506

Script de vérification de la vulnérabilité CVE-2025-62506 Vue d'ensemble Ce dépôt contient un script de vérification pour CVE-2025-62506, une vulnérabilité d'élévation de privilèges dans les comptes de service MinIO et les comptes STS Security Token Service. Description de la vulnérabilité...

EUVD-2026-69732

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...