Venom

Venom Venom es una biblioteca de C++ diseñada para ofrecer una forma alternativa de comunicarse. En lugar de crear un socket que pueda rastrearse hasta el proceso, crea un nuevo proceso de Edge separado y "oculto" no se muestra ninguna ventana Edge fue elegido porque es un navegador que está...

CVE-2019-6447

CVE-2019-6447 La investigación anterior sobre la debilidad de seguridad del explorador de archivos ES nos permite ver el problema en su totalidad...

CVE-2026-95307

An ui misrepresentation flaw was found in the ExtensionsMenu component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/423956129...

CVE-2026-95363

An ui misrepresentation flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522344883...

CVE-2026-95328

A confused deputy flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553148673...

CVE-2026-95300

A missing authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/545449081...

CVE-2026-95314

An incorrect authorization flaw was found in the HID component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517802696...

CVE-2026-95374

An incorrect authorization flaw was found in the Network component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/543464436...

CVE-2026-95385

An inappropriate implementation flaw was found in the PlatformIntegration component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517192965...

CVE-2026-95289

An incorrect authorization flaw was found in the Scroll component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/549911100...

CVE-2026-95321

An ui misrepresentation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/545879261...

CVE-2026-103628

An out of bounds write flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/549995090...

CVE-2026-95360

A race condition flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517584808...

CVE-2026-95330

An improper state validation flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517163294...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS命令注入 PoC English version 概述 此仓库是 File Browser （版本 2.0.0 至 2.33.1）中发现的一个严重 OS 命令注入漏洞 CVE-2026-35585 的概念验证（PoC）。 该漏洞存在于“自定义命令钩子”功能中。由于在 shell 执行时，诸如 $FILE 或 $USERNAME 等环境变量未能得到充分清理，拥有文件上传权限的已认证用户可能利用恶意文件名在主机系统上执行任意命令。 发现者: saku0512 https://github.com/Saku0512 ⚠️ 免责声明...

CVE-2026-95346

An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514059630...

[SECURITY] Fedora 45 Update: yelp-49.2-2.fc45

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook...

[SECURITY] Fedora 45 Update: ochusha-0.6.0.1-0.25.cvs20100817T0000.fc45

The ochusha is BBS, especially 2ch.net, browser with GUI. It uses the GTK+ toolkit for all of its interface needs. The ochusha offers a sort of features such as multi-level popup view of response's, embeded and popup view of images that helps users to interact with BBSs...

[SECURITY] Fedora 45 Update: epiphany-51.0-2.fc45

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the web content, instead of the browser application...

CVE-2026-88782: Improper Neutralization of Input During Web Page Generation

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...