Lucene search
+L

10835 matches found

Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture Cross-Origin Information Disclosure. Safari Rot/Grün/Blau/Weiß Reparierte Version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Prinzip GPUDevice.importExternalTexturesource: HTMLVideoElement importiert ein Video als GPU-abtastba...

6.5CVSS6.3AI score0.00269EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2025-55462

CVE-2025-55462 Zusammenfassung der Schwachstelle In Eramba Community- und Enterprise-Editionen v3.26.0 wurde eine Fehlkonfiguration von Cross-Origin Resource Sharing CORS festgestellt. Die Anwendung spiegelt vom Angreifer kontrollierte Origin-Header im Antwort-Header Access-Control-Allow-Origin d...

6.5CVSS5.2AI score0.00374EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

theftfuzzer

root@kitploit: ┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduzione: TheftFuzzer è uno strumento che effettua fuzzing delle implementazioni Cross-Origin Resource Sharing alla ricerca di configurazioni errate comuni. Utilizzo: python...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

live-server-evil-crawler

Live Server Evil Crawler Um site do GitHub Pages para demonstrar a vulnerabilidade da extensão Live Server do VSCode CVE-2025-65717. Visão Geral Esta ferramenta demonstra uma vulnerabilidade em que o Live Server permite requisições de qualquer origem, possibilitando que páginas web maliciosas...

4.3CVSS6.6AI score0.00549EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

cve-2020-16012

Questo repository contiene PoC per CVE-2020-16012, una vulnerabilità di canale laterale nell'implementazione di CanvasRenderingContext2D.drawImage in Firefox e Chromium. Leggi un articolo su questa vulnerabilità sul blog Mozilla Attack & Defense. All'interno di benchmark si trova il codice per...

4.3CVSS7AI score0.0255EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 1:23 a.m.1 views

dns-rebind-toolkit

مجموعة أدوات إعادة ربط DNS عرض توضيحي | إشعار أمني | الحمولات المضمنة | الأسئلة الشائعة إخلاء مسؤولية: هذا البرنامج لأغراض تعليمية فقط. لا ينبغي استخدام هذا البرنامج في أنشطة غير قانونية. المؤلف غير مسؤول عن استخدامه. لا تكن وغدًا. مجموعة أدوات إعادة ربط DNS هي إطار عمل JavaScript أمامي لتطوير...

5.7AI score
SaveExploits0References10
CVE
CVE
added 2026/08/25 8:10 p.m.5 views

CVE-2026-78896

CVE-2026-78896 is an information leak in the StorageAccessAPI component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this flaw via a crafted HTML page to obtain cross-origin data . The Chromium project rates the security severity as Low . Remediation is to upd...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.5 views

CVE-2026-79034

Google Chrome prior to 152.0.7977.65 is affected by an information leak in its CORS implementation. A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to leak cross-origin data . Chromium classified this vulnerability with a Medium security sever...

5.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.10 views

CVE-2026-78960

CVE-2026-78960 is an information leak in the Extensions component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could obtain cross-origin data through a crafted Chrome extension. The vulnerability is rated Medium severity by Chromiu...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.7 views

CVE-2026-78962

An uninitialized resource vulnerability in WebXR within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to potentially leak cross-origin data through a crafted HTML page. Chromium rated this as Medium severity. The fix is included in Chrome ...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.8 views

CVE-2026-79252

CVE-2026-79252 is an information leak in the ServiceWorker component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to obtain cross-origin data . Chromium rates the severity as Medium . The fix is included in Chrome 152.0....

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.10 views

CVE-2026-79258

CVE-2026-79258 is an incorrect authorization vulnerability in WebXR within Google Chrome prior to version 152.0.7977.65 . A remote attacker leveraging social engineering could use a crafted HTML page to obtain cross-origin data , bypassing expected origin restrictions. Chromium classifies the sev...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.5 views

CVE-2026-79059

CVE-2026-79059 is an information leak in the BFCache (Back/Forward Cache) of Google Chrome prior to 152.0.7977.65 . A remote attacker who had compromised the renderer process could use a crafted HTML page to obtain cross-origin data , effectively bypassing the same-origin policy for data held in ...

5.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.5 views

CVE-2026-78949

Google Chrome on Android versions prior to 152.0.7977.65 contain a vulnerability in CustomTabs characterized by an observable discrepancy that allows a local attacker to obtain cross-origin data via a co-installed app. The Chromium project classifies the severity as Medium . Remediation is to upd...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.9 views

CVE-2026-79146

An information leak in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app . Chromium assigned a Medium severity rating. The fix is available in version 152.0.7977.65 . No exploitation details are provided in th...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.8 views

CVE-2026-79193

CVE-2026-79193 is an information leak in the Canvas component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page that leaks cross-origin data . Chromium classified the severity as Medium . The fix is available in Chrome 152...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.7 views

CVE-2026-79272

CVE-2026-79272 is an improper input validation flaw in the FindInPage component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leak cross-origin data via a crafted HTML page. Chromium classifies the security severity as Medium . Th...

5.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.6 views

CVE-2026-78936

CVE-2026-78936 affects Google Chrome on Android prior to version 152.0.7977.65 . The vulnerability resides in the CustomTabs component, where an observable discrepancy could be leveraged by a local attacker to obtain cross-origin data through a co-installed app. The Chromium project classifies th...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.4 views

CVE-2026-78955

CVE-2026-78955 is an observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 . The flaw allowed a remote attacker to potentially obtain cross-origin data by serving a crafted HTML page to the victim, enabling information leakage across origin boundaries. Chromium classif...

5.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 8:10 p.m.6 views

CVE-2026-79285

CVE-2026-79285 affects ANGLE in Google Chrome on Windows , prior to version 152.0.7977.65 . The root cause is an uninitialized resource , which allows a remote attacker to obtain cross-origin data by delivering a crafted HTML page. The Chromium project rated this as Medium severity. Users should ...

5.3AI score
SaveExploits0References2
Rows per page
Query Builder