DEBIAN-CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

DEBIAN-CVE-2026-79017

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

DEBIAN-CVE-2026-79176

UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-79064

Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

DEBIAN-CVE-2026-79219

Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - Exploit RCE per Grafana Corretto Questa è una versione corretta del proof-of-concept exploit per CVE-2024-9264 , una vulnerabilità critica di esecuzione remota di codice in Grafana tramite espressioni SQL e DuckDB. 🔗 Avviso originale: Grafana Security Release ❌ PoC originale: No...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Esecuzione remota di codice autenticata in Pluck CMS precedente alla versione 4.7.13. Il file manager dell'amministratore admin.php?action=files non convalida le estensioni dei file, consentendo il caricamento di file .phar che Apache esegue come PHP. Il caricamento di...

azbelt

azbelt Standalone-DLL- und Sliver-Erweiterung zum Aufzählen von Azure-bezogenen Anmeldeinformationen, hauptsächlich auf AAD-beigetretenen Rechnern Module aadjoin - Ermittelt Informationen über den AAD-Status des Rechners über NetGetAadJoinInformation credman - Ruft Anmeldeinformationen aus dem...

windbg_js_scripts

Script JavaScript per WinDbg Installa come galleria di WinDbg Clona il repository root@kitploit: git clone https://github.com/hugsy/windbgjsscripts In windbgjsscripts\config.xml, modifica le righe Setting Name="LocalCacheRootFolder" per riflettere il percorso locale del repository. In WinDbg,...

C2Bridge

C2Bridges ermöglichen es Entwicklern, neue benutzerdefinierte Kommunikationsprotokolle zu erstellen und diese schnell in Covenant zu nutzen. C2Bridges C2Bridges werden verwendet, um ein ausgehendes Command-and-Control-Protokoll zu entwickeln, ohne Covenant-Code zu bearbeiten. Für Entwickler, die...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana tramite SQL Expressions Descrizione Prova di concetto per l'esecuzione remota di codice in Grafana CVE-2024-9264 Questo repository contiene uno script Python che sfrutta una vulnerabilità di esecuzione remota di codice RCE nella funzionalità SQL Expressions di...

CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

CVE-2022-31630 - Proof-of-Concept-Exploit für PHP 7.4.33 Warnung: Dieser Code wurde ausschließlich zu Bildungszwecken und für Tests in einer isolierten Laborumgebung erstellt. Die Verwendung auf anderen Systemen ohne Genehmigung ist illegal und unverantwortlich. 📋 Beschreibung CVE-2022-31630 ist...

cirro-azcli-ext

cirro-azcli-ext Un'estensione dell'Azure CLI che raccoglie passivamente i dati delle risorse Azure in un database SQLite compatibile con lo schema di Cirro https://github.com/bishopfox/cirro. Registra inoltre tutte le invocazioni CLI in un file JSON-lines. Si aggancia agli eventi di knack:...

Blind-XSS-Manager

Blind-XSS-Manager Non dimenticare mai dove inietti. Descrizione Un'estensione Chrome che tiene traccia dell'URL iniettato con payload XSS ciechi. Aggiunge un valore univoco per ogni payload assegnato all'URL e registrato dall'estensione quando viene copiato. I payload sono quasi gli stessi di...

vscode-frida

Frida Workbench für VSCode Repository | Probleme | Installieren Dies ist ein von der Community beigetragenes Projekt und steht in keiner Verbindung zum offiziellen Frida-Team. Es wird von @CodeColorist als Open-Source-Erweiterung für Visual Studio Code entwickelt und gepflegt, um die...

ExtensionHijack

ExtensionHijacker Eine mögliche Methode zur Persistenz von Malware. Übernahme von Erweiterungen, die für den aktuellen Benutzer registriert sind. Weitere Informationen hier proxyapp – eine Proxy-Anwendung, die zur Verarbeitung übernommener Erweiterungen verwendet wird hijackerapp – installiert di...

SUIDGuard

SUIDGuard - Un'estensione del kernel che aggiunge mitigazioni a OS X per rendere più difficile lo sfruttamento Copyright c Stefan Esser / SektionEins GmbH, 2015. Tutti i diritti riservati. [email protected] - https://www.sektioneins.de/ SITO WEB UFFICIALE Se sei arrivato qui da un articolo d...