Lucene search
+L

22406 matches found

Kitploit
Kitploit
added 2026/09/12 2:12 p.m.7 views

Microsoft-Edge-Information-Disclosure

Microsoft-Edge-Information-Disclosure CVE-2024-30056 Microsoft Edge Chromium-based Information Disclosure Vulnerability This is a vulnerability in Microsoft Edge Chromium-based. The attacker was able to trick the user into revealing sensitive information without his knowledge. Poc: root@kitploit:...

7.1CVSS7AI score0.01553EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:41 a.m.6 views

CVE-2021-3395

CVE-2021-3395 Suggested description A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment. Vulnerability Type Cross Site Scripting XSS Vendor of Product OOO...

5.4CVSS6AI score0.0075EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:59 a.m.6 views

CVE-2020-6418

CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...

8.8CVSS7.5AI score0.78808EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/12 12:08 a.m.10 views

CVE-2021-30573

CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...

8.8CVSS8AI score0.06282EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/11 8:36 p.m.11 views

CVE-2022-44311

Description for CVE-2022-44311 html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file. Reproduction T...

8.1CVSS7.7AI score0.01136EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 3:06 p.m.5 views

CVE-2021-41074

CVE-2021-41074 CSRF in Qloapps HotelCommerce 1.5.1 There is a CSRF in HotelCommerce 1.5.1. It can allow anyone to change the admin email. If an attacker gets an admin to click a maliciously crafted html document, they can change the admin user email...

5.4CVSS5.8AI score0.00143EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/11 10:31 a.m.3 views

CVE-2026-87654

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

9.6CVSS0.00361EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 10:31 a.m.4 views

CVE-2026-87646

A flaw was found in Google Chrome's Web Authentication component. A remote attacker could exploit a use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox...

9.6CVSS0.00358EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 10:30 a.m.4 views

CVE-2026-87607

A flaw was found in Google Chrome. This vulnerability, known as a 'use after free' error, occurs when a program attempts to use memory after it has been deallocated. This can allow a remote attacker to potentially execute arbitrary code outside the browser's security sandbox when a user visits a...

9.6CVSS0.00423EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 10:11 a.m.3 views

CVE-2026-87569

A flaw was found in Google Chrome. Missing authorization in the Views component allows a remote attacker, leveraging social engineering, to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page...

8.8CVSS0.00245EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 10:10 a.m.3 views

CVE-2026-87492

A flaw was found in DevTools in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to potentially execute arbitrary code outside the browser's security sandbox. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to a severe...

9.6CVSS0.00325EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/11 7:06 a.m.6 views

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/09 4:18 p.m.8 views

CVE-2026-2441

CSS in Google Chrome prior to Remote Code Execution CVE-2026-2441 Overview A HIGH vulnerability, classified as CVE-2026-2441, has been identified, categorized under CWE-416, CWE-416, CVSS 8.8. Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute...

8.8CVSS8.1AI score0.22378EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/09 8:18 a.m.9 views

CVE-2026-4447

CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical...

8.8CVSS7.9AI score0.00354EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/09 2:10 a.m.7 views

CVE-2026-87630

A flaw was found in WebRTC in Chromium-browser. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the browser's sandbox environment...

4.3CVSS0.00226EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 2:10 a.m.5 views

CVE-2026-87451

A flaw was found in Google Chrome. This information leak vulnerability in the Downloads component allows a remote attacker, who has already compromised the browser's renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML...

3.1CVSS0.00217EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 2:10 a.m.5 views

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

5.3CVSS0.00311EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:47 a.m.7 views

CVE-2026-87507

A flaw was found in chromium-browser. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to user interface UI misrepresentation within the Downloads section, allowing the attacker to...

5.4CVSS0.00231EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:45 a.m.3 views

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

4.3CVSS0.00282EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:19 a.m.5 views

CVE-2026-87532

A flaw was found in Google Chrome's Safebrowsing component. Improper state validation allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to system resources...

6.5CVSS0.0021EPSS
SaveExploits1References2
Rows per page
Query Builder