PT-2026-84556

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-84555

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-84559

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome < 152.0.7977.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop advisory. - Use after free in Shared Tab Groups in Google Chrome on on Android prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-84268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that...

PT-2026-84357

Name of the Vulnerable Software and Affected Versions OpenAI Codex Desktop for Windows and macOS affected versions not specified Description The application automatically inspects Git metadata and working-tree status upon opening a workspace. If a workspace contains a repository with a malicious...

PostgreSQL 18.x < 18.6 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 18 prior to 18.6. As such, it is potentially affected by multiple vulnerabilities: - Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, v...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

KLA91248 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

KLA91252 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in the Remote Settings Client...

KLA91254 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

KLA91255 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...

CVE-2025-59287

في هذه الدراسة، سنفحص ثغرة أمنية حرجة CVE-2025-59287 تم اكتشافها في بيئة Microsoft Windows Server Update Services WSUS. تنشأ هذه الثغرة من إلغاء التسلسل غير الآمن لكائنات AuthorizationCookie المرسلة إلى نقطة النهاية GetCookie، حيث يتم فك تشفير بيانات ملفات تعريف الارتباط المشفرة باستخدام...

Analysis-for-stage1-shellcode-loader-from-hacking-

تحليل لمحمّل شيلكود المرحلة الأولى من Hacking Team مخطط انسيابي للكود مؤشرات الاختراق IoC للشبكة https://172\.20\.20\.164 root@kitploit: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;...

Browser-Pwning-

Browser-Pwning توثيق مناسب ومنظم جيداً للبدء في اختراق كروم واختراق v8 هيكل المستند كيف تم تنظيم هذا المستند 1. الدافع 2. المادة الدراسية الفعلية الدافع المتصفحات هي واحدة من أكثر التقنيات استخداماً اليوم. على كل حاسوب جاهز، إذا قمنا فقط بالتوصيل والتشغيل سنرى متصفحاً مثبتاً. لهذا السبب، من منظور...

kern

kern: A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. A real, kernel-enforced container in 3.5 ms, out of one 1.52 MB binary with no daemon. 0 RAM at rest · no daemon, no socket, nothing to start · one static binary, libc its only...

cve-2025-20333

CVE-2025-20333 - مجموعة أدوات البحث والاستغلال الكاملة نظرة عامة يحتوي هذا الدليل على بحث شامل وتحليل وكود إثبات المفهوم لثغرة CVE-2025-20333 ، وهي ثغرة حرجة في تجاوز سعة المخزن المؤقت في خوادم Cisco ASA/FTD WebVPN. الحالة: ⚠️ يتم استغلالها بنشاط في البرية حملة ArcaneDoor درجة CVSS: 9.8 حرجة...

CVE-2026-82222

CVE-2026-82222 — GiveWP Auteur : Rx019 CVSS : 10.0 Critique Type : Injection d'objets PHP non authentifiée → Exécution de code à distance Plugin : GiveWP give — Plugin de dons et plateforme de collecte de fonds Versions concernées : Correctif : 4.16.8 Description GiveWP stocke le lastname d'un...

CVE-2025-59528

Version française CVE-2025-59528 إثبات المفهوم إثبات مفهوم PoC مبسّط يركز على التحقق التقني من الثغرة في بيئة مصرّح بها. المتطلبات الأساسية يجب أن يكون لديك حساب مستخدم على لوحة تحكم Flowise المستهدفة. يجب أن يكون لديك مفتاح API صالح مرتبط بهذا الحساب. يجب تشغيل مستمع listener على مضيف الاستدعاء...

CVE-2018-14667_Lab_POC

CVE-2018-14667-Lab POC pour l'exploitation de CVE-2018-14667 PRÉREQUIS Application de démonstration depuis : http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA depuis l'archive de téléchargement JBOSS :...