datadome-vm

DataDome VM Analysis Summary This repository documents the first public version of DataDome's in-browser JavaScript virtual machine VM used in their CAPTCHA/interstitial flow. This analysis covers: Bytecode loading and decoding mechanisms VM memory layout and architecture A proof-of-concept...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

camjacking-templates

CamJacking CamJacking 是一个安全意识培训与模拟框架 ，旨在帮助组织在受控且经授权的环境中教育用户了解摄像头权限风险、浏览器安全和社会工程学意识。 🎯 什么是 CamJacking？ CamJacking 是一个面向企业的网络安全意识框架，用于在受控实验室环境中模拟真实的摄像头权限提示与用户同意场景。 它帮助组织： ✅ 教育用户了解摄像头和浏览器权限风险 ✅ 演示社会工程学技术的运作方式 ✅ 通过逼真的模拟提升员工安全意识 ✅ 开展经授权的红队/蓝队训练 ✅ 衡量用户响应与安全意识水平 🚨 重要声明 CamJacking 严格仅供以下用途使用： 经授权的安全意识培训...

CVE-2018-4416-exploit

はじめに :PROPERTIES: :CUSTOMID: preface :END: はい、バイナリセキュリティは /heap/ や /stack/ だけではありません。通常のCTFチャレンジ以外にも、まだまだ発見すべきことがたくさんあります。ブラウザ、仮想マシン、カーネルはいずれもバイナリセキュリティにおいて重要な役割を果たします。そして私はまずブラウザから学ぶことにしました。 比較的簡単なものとして /WebKit/ を選びました。（ChakraCore のほうが簡単かもしれませんが、LoL。でも Microsoft...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

WordPress Events Calendar <1.4.5 - Cross-Site Scripting

WordPress Events Calendar plugin before 1.4.5 contains multiple cross-site scripting vulnerabilities. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

browser-security-project

OWASP Browser Security Project The OWASP Browser Security Project raises awareness, provides education, and establishes best practices for securing modern web browsers. Browsers now serve as the primary execution environment for most applications, and this project offers clear, actionable guidanc...

EUVD-2026-78459

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92050

CVE-2026-92050 is a sandbox escape vulnerability caused by a race condition in the XPConnect component of Firefox and Thunderbird . A successful exploit could allow a malicious web page or add-on to break out of the sandbox boundary, potentially leading to code execution in the host process. The ...

Astra Linux – Vulnerability in Firefox

When network partitioning was enabled, for example as a result of Enhanced Tracking Protection settings, a TLS error page allowed users to override an error on a domain that had specified HTTP Strict Transport Security. This means that the error should not be overwritten. This issue did not affec...

CVE-2026-87525

creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:55+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87495

creationtimestamp| type| source ---|---|--- 2026-09-10 04:48:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:07+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87429

creationtimestamp| type| source ---|---|--- 2026-09-10 04:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87443

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

GHSA-MCM5-J3P7-M443 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-84331

creationtimestamp| type| source ---|---|--- 2026-09-02 04:46:44+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260904 2026-09-08...

CVE-2026-84140 Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Chromium: CVE-2026-78953 Missing authorization in SiteIsolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...