53535 matches found
PT-2026-67562
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A use after free issue exists in Microsoft Edge Chromium-based, which allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memor...
Google Chrome Compositing Unauthorized Access
The vulnerability of the Compositing component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a malicious actor to gain unauthorized access to protected information...
Google Chrome Downloads Code Execution
The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Google Chrome V8 Engine Code Execution
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DbGate JSON Script Runner Code Execution
The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Google Chrome Font Component Code Execution
The vulnerability of Google Chrome’s Font component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
IronFox v153.0.2
IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying problem?...
Exploit for Path Traversal in Stitionai Devika
CVE-2024-40422 Python implementation...
mitaka v2.10.0
Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...
Exploit for CVE-2026-9811
CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting...
MAL-2026-11428 Malicious code in wacve-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...
Malicious code in wacve-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...
CVE-2025-71404
better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting XSS vulnerability on the /api/auth/error page, where the value of the 'error' URL parameter is reflected as HTML without proper neutralization. An attacker who coerces a user into visiting a...
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake , a remote access trojan RAT that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attribute it to...
bramble v1.13.0-chromium
Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...
brave-browser v1.95.30
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
kuri v0.5.1
Kuri 🌰 Install root@kitploit: curl -fsSL https://kuri.trilok.ai/download | sh macOS arm64/x8664 and Linux x8664/arm64. Single binary, no runtime deps. Direct downloads: macOS arm64 · macOS x8664 · Linux x8664 · Linux arm64 Browser automation & web crawling for AI agents. Written in Zig. Zero...
Cross-site Scripting (XSS)
Overview org.webjars.npm:jodit is a Jodit is awesome and usefully wysiwyg editor with filebrowser Affected versions of this package are vulnerable to Cross-site Scripting XSS in the sanitizeHTMLElement. An attacker can execute arbitrary JavaScript in the context of the user's browser by crafting ...