EUVD-2026-64758

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references...

EUVD-2026-64772

fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization...

EUVD-2026-64763

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding...

EUVD-2026-64773

fast-uri vulnerable to host confusion via percent-encoded scheme normalization...

CVE-2024-0311

CVE-2024-0311 ？ 这是一个针对我认为 是 CVE-2024-0311、SB10418 的 PoC。 恶意内部人员无需有效的发布代码即可绕过 Skyhigh Client Proxy 的现有策略。 很多细节。非常利用。¯\ツ /¯ 该 PoC 会注入到用户运行的 SCPBypass.exe 进程中，并写入 SCPService.exe 的管道：\.\pipe\MCPTrayPipe0。 注入是必要的，因为即使管道是 RW Everyone，WGUARDNT 也会对写入管道的可执行文件进行一些检查（检查写入者路径），请参阅下文。 我们提供了一个示例 shellcode，即使在...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit 导航 API — 通过跨端口拦截绕过同源策略（CVE-2026-20643） | ---|--- CVE| CVE-2026-20643 发现者| Thomas Espach WebKit Bugzilla 306050 组件| WebKit — WebCore::Navigation::innerDispatchNavigateEvent 受影响版本| iOS 26.3.1 build 23D8133 iPhone18,2 类型| SOP 绕过 交互方式| 点击 / 链接激活 确认方式| 对存在漏洞与已修补的...

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257...

CVE-2019-14287-IT18030372-

CVE-2019-14287-IT18030372- Sudo 安全策略绕过漏洞...

Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo漏洞利用——CVE-2019-14287 Sudo被发现不可靠，它是几乎任何基于Unix和Linux的操作系统中最重要、最强大且最常用的实用程序之一，作为一个简单的命令存在。一个伪安全策略绕过缺陷，允许恶意用户或应用程序在目标Linux设备上执行任意命令。该错误需要非标准设置才能触发。换句话说，Linux机器本身并不会自然地被破坏。错误的用户只应在Linux操作系统上执行命令时使用“Super User Do”命令，通过将用户ID定义为“-1”来作为命令源执行1。这种不安全性需要按CVE-2019-14287中演示的结构化设置，但也为未授权用户打开了大门。在命令行中使用 -u -...

CVE-2025-62506

CVE-2025-62506 脆弱性検証スクリプト 概要 このリポジトリには、MinIO サービスアカウントおよび STS（Security Token Service）アカウントにおける権限昇格の脆弱性である CVE-2025-62506 の検証スクリプトが含まれています。 脆弱性の説明 CVE-2025-62506 は、制限付きサービスアカウントおよび STS アカウントが、同じユーザーに対して新しいサービスアカウントを作成する際に、自身のアカウント操作を実行するときにインラインポリシーの制限を回避できる権限昇格の脆弱性です。 技術的詳細 この脆弱性は、cmd/iam.go の IA...

EUVD-2026-69732

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

EUVD-2026-69739

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69742

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84355

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84328

A flaw was found in Google Chrome's FileSystem component. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. By crafting a malicious HTML page, the attacker can circumvent security restrictions,...

CVE-2026-84331

CVE-2026-84331 is an incorrect authorization flaw in the Actor component of Google Chrome prior to version 152.0.7977.75 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . Chromium rates the severity as Low ; t...

CVE-2026-84355

CVE-2026-84355 is an incorrect authorization vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . The Chromium project rates this ...

CVE-2026-84355

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...