WordPress Events Calendar <1.4.5 - Cross-Site Scripting

WordPress Events Calendar plugin before 1.4.5 contains multiple cross-site scripting vulnerabilities. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

CVE-2018-4416-exploit

Предисловие :PROPERTIES: :CUSTOMID: preface :END: Итак, безопасность бинарного кода — это не только /heap/ и /stack/, нам еще многое предстоит открыть, несмотря на обычные CTF-задачи. Браузер, виртуальная машина и ядро играют важную роль в безопасности бинарного кода. И я решил сначала изучить...

camjacking-templates

CamJacking CamJacking은 조직이 통제되고 승인된 환경에서 사용자에게 카메라 권한 위험, 브라우저 보안 및 사회공학 인식을 교육하도록 돕기 위해 설계된 보안 인식 훈련 및 시뮬레이션 프레임워크 입니다. 🎯 CamJacking이란 무엇인가요? CamJacking 은 통제된 실험실 환경에서 실제와 같은 카메라 권한 요청 프롬프트와 사용자 동의 시나리오를 시뮬레이션하도록 구축된 기업 중심의 사이버 보안 인식 프레임워크입니다. 조직이 다음을 수행할 수 있도록 돕습니다: ✅ 사용자에게 카메라 및 브라우저 권한 위험 교육 ...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

datadome-vm

Анализ виртуальной машины DataDome Краткое описание Этот репозиторий содержит первую публичную версию анализа встроенной в браузер JavaScript виртуальной машины VM DataDome, используемой в их CAPTCHA/промежуточном потоке. Анализ охватывает: Механизмы загрузки и декодирования байткода Структуру...

browser-security-project

OWASP Browser Security Project The OWASP Browser Security Project raises awareness, provides education, and establishes best practices for securing modern web browsers. Browsers now serve as the primary execution environment for most applications, and this project offers clear, actionable guidanc...

EUVD-2026-78459

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92050

This vulnerability allows for a sandbox escape due to a race condition in the XPConnect component . The issue has been resolved in Firefox 156 and Thunderbird 156 . While a security sighting was reported on 2026-09-17, specific details regarding exploit vectors or in-the-wild exploitation methods...

Astra Linux – Vulnerability in Firefox

When network partitioning was enabled, for example as a result of Enhanced Tracking Protection settings, a TLS error page allowed users to override an error on a domain that had specified HTTP Strict Transport Security. This means that the error should not be overwritten. This issue did not affec...

CVE-2026-87525

creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:55+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87495

creationtimestamp| type| source ---|---|--- 2026-09-10 04:48:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:07+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87429

creationtimestamp| type| source ---|---|--- 2026-09-10 04:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87443

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

GHSA-MCM5-J3P7-M443 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-84331

creationtimestamp| type| source ---|---|--- 2026-09-02 04:46:44+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260904 2026-09-08...

CVE-2026-84140 Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Chromium: CVE-2026-78953 Missing authorization in SiteIsolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...