Linux Distros Unpatched Vulnerability : CVE-2026-87599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-87615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-87507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a...

Linux Distros Unpatched Vulnerability : CVE-2026-87597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app...

Linux Distros Unpatched Vulnerability : CVE-2026-87472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elemen...

PT-2026-88601

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88586

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

PT-2026-88572

Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88640

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HT...

PT-2026-88753

UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-87465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI...

HLF_TxTime_spoofing

HLFTxTimespoofing HLFTxTimespoofing —— 一个概念验证项目，涵盖了 Hyperledger Fabric 区块链中交易时间操纵的问题（使用 GetTxTimestamp 或 GetHistoryForKey）。已在 v2.5.5 和 v3.0.0-beta 版本上测试。 项目由以下几部分组成： 1. timeinsecure - 使用 GetTxTimestamp 计算存款利息的不安全链码变体 2. timesecurentp - 一个从 NTP（网络时间协议）服务器获取时间以防范攻击者在计算存款利息时进行时间欺骗的链码 3. timesecurent...

CVE-2020-25265-25266

CVE-2020-25265 / CVE-2020-25266 CVE-2020-25265 CVE-2020-25266 这是 libappimage 和 appimaged 的一个 PoC 漏洞利用。 通过组合利用这两个 CVE，可以创建一个看起来并非 AppImage 的文件，该文件既会被 appimaged 隐式拾取并安装，从而覆盖系统中已安装的同一应用程序版本。 在本例中，使用 MP3 文件作为载荷，被覆盖的应用程序是 Nautilus。 受影响版本 这会影响所有版本的 appimaged，以及所有早于 1.0.3 的 libappimage 版本。 发生了什么 MP3...

CVE-2019-17240

CVE-2019-17240 漏洞利用工具 Bludit CMS 3.9.2及之前版本存在一个安全漏洞，可绕过其针对登录失败10次以上用户所设置的抗暴力破解机制。 该漏洞由 Rastating 发现。 提交一个带有 X-Forwarded-For 头值（伪造字符串）的登录请求时，该请求会被成功处理，而失败的登录尝试则会记录在该伪造字符串上。 上述脚本正是利用此漏洞绕过抗暴力破解机制。 登录页面的请求体中包含 csrf 令牌，因此在每次携带凭证发送 POST 请求之前，都需要从上一次响应的源码中获取 csrf 令牌。 一种实现方法是：先发送 GET 请求获取 csrf...

CVE-2026-78560

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – Escritura Modbus TCP a Bobinas de Solo Lectura mediante Suplantación de Código de Función Código del Programa Python con simulación pymodbus root@kitploit: modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from...

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

CVE-2026-78560 Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

EUVD-2026-74171

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...