CVE-2026-106263

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity security issue. The flaw stems from improper input validation within the SignIn component, which could allow a remote attacker to bypass system access restrictions. This attack requires the use of social engineering...

CVE-2026-106263

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106424

An information leak vulnerability in the Audio component of Google Chrome versions prior to 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox using a crafted Chrome extension . No specific exploit links or in-the-wild exploi...

EUVD-2026-93706

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106389

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw involving USB access. A remote attacker using social engineering can bypass system access restrictions by utilizing a crafted Chrome extension . No specific exploit links or in-the-wild exploitation de...

EUVD-2026-93693

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93856

Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106420

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106420

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an incorrect calculation within an API. A remote attacker can leverage social engineering to deploy a crafted Chrome extension capable of spoofing UI elements . This vulnerability has been sighted in the wild. No specific e...

EUVD-2026-93854

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106420

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106208

Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106208

Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

dorkish

Dorkish Во время фазы разведки или при проведении OSINT мы часто используем Google-доркинг и Shodan, отсюда и идея Dorkish. Dorkish — это расширение для Chrome, которое упрощает создание пользовательских дорков для Google и Shodan с помощью конструктора, а также предлагает готовые дорки для...

generator-burp-extension

Générateur d'extension Burp !NPM versionnpm-imagenpm-url Installation Premièrement, installez Yeoman et generator-burp-extension avec npm nous supposons que vous avez préinstallé node.js. npm install -g yo npm install -g generator-burp-extension Ensuite générez votre nouveau projet : yo...

CVE-2026-70376

CVE-2026-70376 — Pluck CMS Site-wide CSRF → RCE Fail-open Referer check + no CSRF tokens + double-extension upload A single admin page-visit deletes content, injects pages, and drops a webshell At a glance · Summary · Root cause · Attack chain · Exploit · Remediation · Timeline 📋 At a glance |...

gha-lab-0ba60e6456

Интеграционное тестирование Эта папка содержит интеграционные тесты расширения. Они определены с помощью тестового раннера Playwright и вспомогательного инструмента Galata. Конфигурация Playwright определена в playwright.config.js. Конфигурация сервера JupyterLab для интеграционного тестирования...

tomcat-line-check

tomcat-line-check CVE-2026-24880 · GHSA-563x-q5rq-57qp —— Apache 那句 upgrade to version 11.0.20, 10.1.52 or 9.0.116 对你成不成立? 对多数人不成立,而且有四种不同的不成立方式。这个工具扫你的构件,告诉你是哪一种。 java -jar tomcat-line-check.jar /path/to/tomcat 解压部署的 Tomcat java -jar tomcat-line-check.jar app.war war java -jar...

heartbleed-lab

Heartbleed Lab Educational laboratory for studying the Heartbleed vulnerability CVE-2014-0160 using a real vulnerable OpenSSL environment inside Docker. This project reproduces a vulnerable TLS server using OpenSSL 1.0.1f and implements a custom raw TLS heartbeat client to demonstrate how malform...

BIT-JUPYTERLAB-2026-102904 JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...