browser-security-project

Este repositorio nao tem um README...

WordPress Events Calendar <1.4.5 - Cross-Site Scripting

WordPress Events Calendar plugin before 1.4.5 contains multiple cross-site scripting vulnerabilities. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

CVE-2018-4416-exploit

Prefácio :PROPERTIES: :CUSTOMID: preface :END: Ok, segurança binária não é só /heap/ e /stack/, ainda temos muito a descobrir apesar dos desafios regulares de CTF. Navegador, Máquina Virtual e Kernel desempenham um papel importante na segurança binária. E eu decidi estudar navegador primeiro...

camjacking-templates

CamJacking CamJacking एक सुरक्षा जागरूकता प्रशिक्षण और सिमुलेशन फ्रेमवर्क है जिसे संगठनों को नियंत्रित, अधिकृत वातावरण में कैमरा अनुमति जोखिमों, ब्राउज़र सुरक्षा और सोशल इंजीनियरिंग जागरूकता के बारे में उपयोगकर्ताओं को शिक्षित करने में मदद करने के लिए डिज़ाइन किया गया है। 🎯 CamJacking क्या है?...

datadome-vm

Análise da VM do DataDome Resumo Este repositório documenta a primeira versão pública da máquina virtual VM JavaScript no navegador do DataDome, usada no fluxo de CAPTCHA/interstitial. Esta análise cobre: Mecanismos de carregamento e decodificação de bytecode Layout e arquitetura da memória da VM...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

CVE-2026-79176

creationtimestamp| type| source ---|---|--- 2026-08-26 05:15:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826...

CVE-2026-79026

creationtimestamp| type| source ---|---|--- 2026-08-26 04:49:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-26 17:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtytr344to2e...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

CVE-2026-76038

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:33+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...

CVE-2026-76037

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...

CVE-2026-76035

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-19 15:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgyobtpq325 2026-08-21 01:40:09+00:00| seen|...

CVE-2026-74989

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:14+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 18:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjuuprenv2b...

CVE-2026-74963

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:14+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74962

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:12+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

EUVD-2026-60686

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

EUVD-2026-60663

Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74960

Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

PT-2026-76973

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 115.39 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to...