CVE-2025-27363

CVE-2025-27363 Chrome 113에서 참고: Chrome에서 이는 새로운 취약점이 아닙니다. 2023년 3월에 패치롤업 커밋되었습니다. 이 PoC는 오직 Chrome headless 모드만 대상으로 합니다. 하지만, 내부 구조를 탐구하고 작은 slotsize xD를 가질 때 PartitionAlloc에서의 익스플로잇을 보고 싶다면 흥미로운 읽을거리라고 생각합니다. 저자: Altin tin-z 환경: 커밋 a7a083d 우분투 20/24 목차: 분석 및 익스플로잇 writeup pocrce pocleak tests...

crawlergo

crawlergo 웹 취약점 스캐너를 위한 강력한 브라우저 크롤러 영어 문서 | 중국어 문서 crawlergo는 chrome headless 모드를 사용하여 URL을 수집하는 브라우저 크롤러입니다. DOM 렌더링 단계에서 웹 페이지의 주요 지점을 후킹하고, 자동으로 폼을 채우고 제출하며, 지능적인 JS 이벤트 트리거를 통해 웹사이트가 노출하는 가능한 많은 항목을 수집합니다. 내장된 URL 중복 제거 모듈은 많은 의사 정적 URL을 필터링하면서도 대규모 웹사이트에 대해 빠른 파싱 및 크롤링 속도를 유지하며, 최종적으로 고품질의 ...

gowitness

gowitness Chrome Headless를 사용하는 Golang 웹 스크린샷 유틸리티. 소개 gowitness는 Golang으로 작성된 웹사이트 스크린샷 유틸리티로, Chrome Headless를 사용하여 명령줄에서 웹 인터페이스의 스크린샷을 생성하고, 결과를 처리할 수 있는 편리한 보고서 뷰어를 제공합니다. Linux와 macOS가 지원되며, Windows도 대부분 작동합니다. 기능 gowitness의 주요 목표는 웹사이트 스크린샷을 그리고 잘 찍는 것! 찍는 동시에, 그 과정에서 수집한 모든 정보를 선택적으로 저장하는...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

gowitness v3.2.0

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...

CVE-2026-17883

A flaw was found in Google Chrome's Headless mode. A remote attacker could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass the Same-Origin Policy SOP, a security mechanism that prevents web pages from interacting...

CVE-2026-17883

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

DEBIAN-CVE-2026-13832

Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13832

Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-12027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-12027

Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a security vulnerability caused by an improper implementation in the Headless component. This vulnerability could allow remote attackers to execute a sandbox escape by exploiting a...

EUVD-2026-34377

Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-10928

Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-10928

Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-10017

Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10017

Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Crawlergo - A Powerful Browser Crawler For Web Vulnerability Scanners

crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with intelligent JS event triggering, and collects as many entries exposed by the website as possible. Th...

h1-ctf: Grinch Networks compromised!

Grinch Networks compromised! For fast triage/validation and inspired by @manoelt in other CTF, I made a bash script to find and print all the 12 flags of this CTF. The script uses curl, wget, google-chrome headless for flag 2, unzip, grep and sed. If any of these commands is missing, the script...