Crashcast-Exploit

CRASHCAST 대량 익스플로잇 도구 저자: @037 이 도구를 사용하면 Shodan.io에서 얻은 Chromecast 기기에서 YouTube 동영상을 대량 재생하고, 앱을 원격으로 종료하며, 기기 이름을 변경할 수 있습니다. 사전 요구 사항 설치해야 할 것은 Python 3.x뿐입니다. sudo apt-get install python3 또한 cURL이 설치되어 있어야 합니다. sudo apt-get install curl 또한 Shodan Python 모듈이 필요합니다. pip install shodan Shodan AP...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

killcast

네트워크 내 Chromecast 기기 조작 사용 가능한 환경 영감 - 수천 대의 Google Chromecast 기기가 하이재킹되어 PewDiePie를 홍보함 이 도구는 개념 증명PoC이며 연구 목적으로만 사용됩니다. killcast는 Chromecast 기기가 누구에 의해 쉽게 조작되고 하이재킹될 수 있음을 보여줍니다. 기능 Chromecast 기기 정보 추출 IP 주소 정찰 저장된 네트워크 추출 주변 WiFi 액세스 포인트 스캔 WiFi 액세스 포인트 삭제 기기 이름 변경 실행 중인 앱 종료 기기 재부팅 공장 초기화 수행 ...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

rickmote

rickmote Rickmote Controller: Google Chromecast로 TV 하이재킹하기 Rickmote는 Chromecast를 하이재킹하고 연결된 TV에서 임의의 동영상을 재생하기 위한 Python 프로그램입니다. 이 해킹이 작동하는 방식에 대한 자세한 내용은 뉴욕에서 열린 HOPE X의 "Google Chromecast로 이웃에게 Rickroll 시키기" 강연에서 공개되었습니다. 여기에서 확인하세요: https://www.youtube.com/watch?v=Bv9rlT8Zgvw 또한 이 모든 기능은...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...

DEBIAN-CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95372

A Use after free vulnerability exists in Chromecast within Google Chrome versions prior to 154.0.8037.57 . A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page. Reme...

CVE-2026-95372: Use After Free

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95372): chromium -- security fixes

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 152.0.7977.65, using free after in the Chromecast with Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Improper input validation in Chromecast within Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-95372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute...

Chromium CVE-2026-87588: Use after free in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...