2000 matches found
cve-2025-4664
CVE-2025-4664 이 저장소는 Chromium 기반 브라우저가 Link 헤더 프리로드 요청을 통해 민감한 URL 매개변수를 유출하는 취약점인 CVE-2025-4664를 악용하기 위한 PoC를 포함하고 있습니다. 리소스 이 익스플로잇이 어떻게 동작하는지 자세한 설명은 블로그 게시물에서 읽어보세요: https://amalmurali.me/posts/cve-2025-4664e. 흐름을 이해하려면 이 비디오를 시청하세요: 파일 target.py - 취약한 웹 애플리케이션 idp.py - SSO ID 공급자 attacker.py...
Microsoft-Edge-Information-Disclosure
Microsoft-Edge-Information-Disclosure CVE-2024-30056 Microsoft Edge Chromium-based 정보 노출 취약점 이는 Microsoft Edge Chromium 기반의 취약점입니다. 공격자는 사용자가 자신도 모르게 민감한 정보를 노출하도록 속일 수 있습니다. PoC: root@kitploit: PoC CVE-2024-30056 body font-family: Arial, sans-serif; margin: 20px; h1 color: 333; pre...
CVE-2026-70309
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-66798
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-67853
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-70309
An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, indicating that exploitation requires user interaction and results in...
CVE-2026-72984
CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) , described as an "access of resource using incompatible type." This flaw allows an unauthorized attacker to achieve remote code execution over a network, provided user interaction is required (e.g., the victim vi...
CVE-2026-70309 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
EUVD-2026-67852
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-67851
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-66798
Microsoft Edge (Chromium-based) is affected by a Use After Free vulnerability that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 base score is 4.3 (MEDIUM) , with an attack vector of network, low complexity, no privileges required, but user interaction required . N...
CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
EUVD-2026-67850
External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66324
CVE-2026-66324 is a spoofing vulnerability in Microsoft Edge (Chromium-based) caused by external control of a file name or path . An unauthorized network-based attacker with low complexity and no prior privileges , but requiring user interaction , can exploit this to perform spoofing. The CVSS 3....
EUVD-2026-67849
Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...