320 matches found
CVE-2022-30190_EXP_PowerPoint
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-30190 on PowerPoint. Modify the suffix of the file to 'zip' and unzip the file, you can edit \ppt\slides\rels\slide1.xml.rels and replace to your vps ip:port like this, then compress them as the same way and change the suffix to 'ppsx'. The...
CVE-2017-5124
CVE-2017-5124 UXSS with MHTML DEMO: https://bo0om.ru/chromepoc/PoC.php tested on Chrome/61.0.3163.100...
Random-Scripts
Random-Scripts Name| Description ---|--- pyLNK-Forensics| This script is useful for getting valuable information from malicious LNK samples. pyExtractOLEfromMHTML| This script is for extracting the OLE object from MHTML. pyDomainMurmurHash| This tool is to calculate the MurmurHash value of a...
Astra Linux – Vulnerability in Chromium
In Google Chrome, policy bypass in MHTML before version 151.0.7922.72 allowed a remote attacker to leak cross-origin data through a crafted MHTML page. Chromium security severity: Low...
ROS-20260915-73-0040
The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
Astra Linux – Vulnerability in Chromium
In Google Chrome, before version 147.0.7727.138, races in the MHTML format allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data through a crafted Chrome Extension. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted MHTML page. Chromium security severity: High...
MHTML Component Confidential Data Access
The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
Chromium: CVE-2026-17710 Inappropriate implementation in MHTML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17954 Policy bypass in MHTML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-17710
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-17954
A policy bypass flaw was found in the MHTML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517383492...
SUSE CVE-2026-17954
Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...
CVE-2026-17710
An inappropriate implementation flaw was found in the MHTML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519991712...
CVE-2026-17954
Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-17954
Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...
CVE-2026-17710
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-17954
Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...