CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser デスクトップ版、バージョン 24.7.1.380 未満 には、信頼されていない検索パスが使用されているため、DLL ハイジャック の脆弱性があります。 脆弱なブラウザバージョン !IMPORTANT インストール中はインターネットをオフにしてください。そうしないとブラウザが更新されます。 脆弱なバージョンは download.cdn.yandex.net からダウンロードできます。 またはアーカイブを使用する場合: 1. YandexBrowser24.4.5.498.zip をダウンロードして解凍します 2...

user-agent-desktop

This project is discontinued. We recommend to use Ghostery Tracker and Ad Blocker in Firefox. Ghostery Private Browser The Ghostery Desktop Browser is a minimal fork of Firefox optimised for privacy. The main extra features are: The Ghostery Privacy Blocker extension is included and enabled by...

user-agent-desktop

このプロジェクトは廃止されました。 代わりに、Firefox 向けの Ghostery Tracker and Ad Blocker をご利用いただくことを推奨します。 Ghostery Private Browser Ghostery デスクトップブラウザは、プライバシーに最適化された Firefox の最小限のフォークです。主な追加機能は次のとおりです: Ghostery Privacy Blocker 拡張機能が同梱され、デフォルトで有効化されています。 Ghostery プライバシー検索が含まれています。 Firefox...

CVE-2026-59668: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”...

CVE-2026-59666: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affected – endpoint “/es/origins/store”...

CVE-2026-59671: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesdatatable” is affected...

CVE-2026-59672: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...

CVE-2026-59663: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomDelegacion” parameter is affected – endpoint “/es/delegations/store”...

CVE-2026-59670: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomListaValidacion” parameter is affected – endpoint...

PT-2026-104190

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomDelegacion” parameter is affected – endpoint “/es/delegations/store”...

Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_74084)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202674084 advisory. chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory access in...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

browser-security-project

OWASP Browser Security Project The OWASP Browser Security Project raises awareness, provides education, and establishes best practices for securing modern web browsers. Browsers now serve as the primary execution environment for most applications, and this project offers clear, actionable guidanc...

hayduk

Hayduk: Open-source Metasploit GUI and Armitage alternative Hayduk is a free, open-source Metasploit GUI for authorized penetration testing. It brings the Armitage workflow to your browser: map hosts, browse modules, manage Meterpreter and shell sessions, and export campaign reports. Download one...

CVE-2026-95341

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523719002...

CVE-2026-95305

An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553921181...

CVE-2026-95292

An incorrect authorization flaw was found in the Safebrowsing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513781838...

CVE-2026-95326

An incomplete cleanup flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533041383...

CVE-2026-95384

A race condition flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/526550688...

CVE-2026-95376

An externally controlled reference flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513134076...