50398 matches found
CVE-2026-95311
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox by convincing a user to open a crafted HTML page. This vulnerability occurs because the Fonts component improperly attempts to deallocate memory that was not dynamically allocated on t...
CVE-2026-95277
A flaw was found in chromium-browser's Views component. A remote attacker can exploit this vulnerability to achieve arbitrary code execution outside the browser sandbox by tricking a user into viewing a specially crafted HTML page. This issue occurs due to a use-after-free condition, where memory...
DEBIAN-CVE-2026-95298
Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
Protection Mechanism Failure
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Protection Mechanism Failure via insufficient keying of sandboxed preload script code cache entries, allowing a renderer...
CVE-2026-95294
Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw in the Browser component. A remote attacker can exploit this by leveraging social engineering to spoof UI elements through a crafted HTML page. Remediation is available in version 154.0.8037.57 ; for examp...
EUVD-2026-89226
Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
CVE-2022-4262
Exploit para CVE-2022-4262 Informe de error oficial de Chromium. Reconocimiento a @clem1 por descubrir el exploit ITW. Reconocimiento a @5aelo por su RCA sobre el error. Reconocimiento a @bjrjk por su RCA súper detallado sobre el error. Reconocimiento a @alisaesage por su video sobre el error...
cve-2026-40369-exploit
这里参考了https://voidsec.com/cve-2026-40369-browser-sandbox-escape/, 思路与https://github.com/orinimron123/CVE-2026-40369-EXPLOIT有较大差异, 并且没看到他们有公开的exp, 所以记录了一下...
npm-demo
Browser Demo NPM/JavaScript For instructions on how to run and use this demo, see the Hands-On Trial Guide...
Ironsquirrel
IRONSQUIRREL 本项目旨在以加密方式向受害者浏览器传递浏览器漏洞利用代码。采用椭圆曲线 Diffie-Hellman（secp256k1）进行密钥协商，并使用 AES 进行加密。 通过以加密方式向受害者传递漏洞利用代码（和 shellcode），攻击无法被重放。同时，HTML/JS 源代码经过加密，从而显著增加了逆向分析漏洞利用代码的难度。 如果您不明白我在说什么，请搜索“如何隐藏您的浏览器 0-day 漏洞”，并查看我的演讲。或者可以在 YouTube 上观看：https://www.youtube.com/watch?v=eyMDd98uljI 或者查看 SlideShar...
PHP-CGI-INTERNAL-RCE
PHP-CGI-INTERNAL-RCE Este PoC demuestra cómo un atacante puede encadenar Orange Tsai's CVE-2024-4577 con DNS rebinding para lograr ejecución remota de código en infraestructura de red interna directamente a través del navegador web de la víctima. Al eludir la Política del Mismo Origen SOP y...
Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js
GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components: CVE| Packages| Severity| Description ---|---|---|---...
jitsploitation
jitsploitation Exploit de navegador iOS para CVE-2020-9802, un antiguo bug de JIT. Este es un exploit para un bug popular del compilador JIT en el motor WebKit para macOS y iOS originalmente documentado por Project Zero. Reimplementé el exploit para este bug como un ejercicio de aprendizaje de...
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95298): chromium -- security fixes
Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...
PT-2026-102421
Name of the Vulnerable Software and Affected Versions GestSup versions prior to 3.2.62 Description Insufficient sanitization of HTML email bodies within the IMAP LOGIN connector allows unauthenticated attackers to perform a stored cross-site scripting attack. By sending emails to the monitored...
Browser-Pwning-
Browser-Pwning Una documentación adecuada y bien estructurada para comenzar con chrome pwning & v8 pwning Estructura del documento Cómo está organizado este documento 1. Motivación 2. Material de estudio real Motivación Los navegadores son una de las tecnologías más utilizadas hoy en día. En...
CVE-2026-87482
A flaw was found in chromium-browser. The HttpsUpgrades feature fails to properly enforce encrypted connections, resulting in the cleartext transmission of sensitive data. A remote attacker could exploit this vulnerability by sending crafted network traffic to intercept and expose sensitive...
CVE-2026-13018
A flaw was found in chromium-browser. Due to insufficient validation of untrusted input in the video codecs component, a remote attacker could trigger an out-of-bounds memory access by convincing a user to process a specially crafted video file. Successful exploitation could lead to an applicatio...
CVE-2026-100753 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager Free element to execute in the browser of anyone who loads the crafted link...