beyondtrust-cve-2026-1232

🔍 漏洞研究 精心整理的深入漏洞分析报告合集，涵盖软件生态中的真实安全事件。每篇报告均包含完整技术分析、概念验证、IOC列表及修复指南。 目的： 教育参考与作品集。所有PoC代码仅用于检测与研究。 索引 | 漏洞| 类型| 严重程度| 日期| 状态 ---|---|---|---|---|--- 004| BeyondTrust Privilege Management for Windows CVE-2026-1232| 防篡改绕过 / 权限控制弱点| 🟠 中等| 2026年2月1日| ✅ 已完成 结构 每篇报告遵循统一格式： root@kitploit:...

CVE-2026-78999

A flaw was found in Google Chrome's Navigation component. Improper privilege management could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs via a specially...

DEBIAN-CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Unauthenticated Privilege Escalation via Role Injection === Beelze zeroday 1diot9 === 📋 Schwachstelleninformationen Feld| Details ---|--- CVE-ID| CVE-2026-5118 CVSS-Score| 9.8 Kritisch CVSS-Vektor| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-269...

CVE-2026-79276

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79226

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could craft an HTML page to bypass system access restrictions . Google classifies this as Chromium severity: Low , yet the CNA...

CVE-2026-79276

CVE-2026-79276 is an improper privilege management flaw in the FileSystem component of Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage social engineering to deliver a crafted HTML page that bypasses system access restrictions. The Chromium project rates the severity as Mediu...

CVE-2026-79226

Google Chrome prior to 152.0.7977.65 is affected by an improper privilege management flaw in the Regional Capabilities component. A remote attacker leveraging social engineering can exploit this through a crafted Chrome extension to bypass system access restrictions . Chromium rates the severity ...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

CVE-2026-78999

An improper privilege management flaw in the Navigation component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, who had already compromised the renderer process and leveraged social engineering, to execute arbitrary code outside the sandbox via a crafted HTML page. The NVD-as...

GSSC-CVE-2022-41923

Workaround für CVE-2022-41923: Schwachstelle in der Berechtigungsverwaltung Zusammenfassung Die Schwachstelle CVE-2022-41923 im ungepatchten Grails Spring Security Core GSSC-Plugin kann zu einer unsachgemäßen Berechtigungsverwaltung führen. Dieses Repository beschreibt, wie der Fehler umgangen...

CVE-2026-13610

CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Gerenciamento Impróprio de Privilégios | Registro não autenticado com função de funcionário escolhida pelo atacante → divulgação de PHI de pacientes Visão Geral Vulnerabilidade crítica no plugin WordPress KiviCare – Clinic &...

sudo-cve-2019-14287

Die sudo-Philosophie =================== Sudo ist ein Programm, das es einem Systemadministrator ermöglicht, Benutzern eingeschränkte Root-Rechte zu gewähren und Root-Aktivitäten zu protokollieren. Die grundlegende Philosophie ist es, so wenige Privilegien wie möglich zu gewähren, dennoch den...

CVE-2022-0441

Una vulnerabilità classificata come critica è stata trovata nel plugin MasterStudy LMS fino alla versione 2.7.5 su WordPress plugin WordPress. Questa vulnerabilità interessa una parte sconosciuta del componente New Account Handler. La manipolazione tramite un input sconosciuto porta a una...