CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106258

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106236

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-106215

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106215

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106214

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

DEBIAN-CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

DEBIAN-CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-79815

The ClearPass Policy Manager OnGuard agent is susceptible to a command injection vulnerability. An authenticated remote attacker can exploit this flaw to inject arbitrary commands, potentially resulting in the execution of commands with elevated privileges on the affected Windows endpoint . No sp...

EUVD-2026-93901

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79815 Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79807

The ClearPass Policy Manager Windows client software contains a missing integrity verification vulnerability. This flaw could allow an authenticated local user to perform Local Privilege Escalation , enabling them to execute arbitrary code with elevated privileges on the local system. No specific...

EUVD-2026-93893

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

CVE-2026-79807 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

SilentMoonwalk

SilentMoonwalk Implémentation d’un preuve de concept PoC d’un spoofeur de pile d’appels entièrement dynamique. TL;DR SilentMoonwalk est une implémentation PoC d’un spoofeur de pile d’appels entièrement dynamique, mettant en œuvre une technique permettant de supprimer l’appelant d’origine de la pi...

CVE-2023-28229

CVE-2023-28229 Windows CNG KeyIso RPC EoP/SBX Обнаружил: @k0shl Ссылка: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation Если компиляция завершится с ошибкой, переименуйте rpc.h во что-нибудь другое, потому что я не знал, что rpc.h —...

gdog

Gdog Un backdoor Windows furtif basé sur Python qui utilise Gmail comme serveur de commande et de contrôle Ce projet a été inspiré par gcat https://github.com/byt3bl33d3r/gcat de byt3bl33d3r. Prérequis Python 2.x Module PyCrypto Module WMI Module Enum34 Module Netifaces Fonctionnalités Messages d...

swapgs-attack-poc

PoC для атаки SWAPGS CVE-2019-1125 Этот репозиторий содержит исходные коды PoC атаки SWAPGS, публично показанной на Black Hat USA, 2019. Содержание leakgsbkva - вариант 1 поиск случайных значений в памяти ядра; ограничен заголовком образа ядра PE leakgsbkvat - вариант 2 извлечение случайных...