EUVD-2026-79995

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-91719

CVE-2026-91719 is a code injection in XML vulnerability in Google Chrome prior to version 153.0.8010.47 . A remote attacker could exploit it via a crafted HTML page to bypass the web origin policy . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.47 ...

EUVD-2026-79986

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91732

CVE-2026-91732 is a missing authorization vulnerability in the AppManifest component of Google Chrome prior to version 153.0.8010.47 . A remote attacker who had already compromised the renderer process could, by leveraging social engineering and a crafted HTML page, bypass the web origin policy ....

CVE-2026-91732

Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

dref

DNSリバインディングエクスプロイトフレームワーク このプロジェクトはメンテナンスされていません。 drefはDNSリバインディングの重労働を行います。以下は、組み込みペイロードの一つからのスニペットで、フックされたブラウザからローカルサブネットをスキャンするためにフレームワークが使用される様子を示しています。ライブWebサービスを特定した後、Same-Originポリシーを簡単に突破してGETレスポンスを流出させます。 root@kitploit: // mainFrame runs first async function mainFrame // We use some trick...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit 导航 API — 通过跨端口拦截绕过同源策略（CVE-2026-20643） | ---|--- CVE| CVE-2026-20643 发现者| Thomas Espach WebKit Bugzilla 306050 组件| WebKit — WebCore::Navigation::innerDispatchNavigateEvent 受影响版本| iOS 26.3.1 build 23D8133 iPhone18,2 类型| SOP 绕过 交互方式| 点击 / 链接激活 确认方式| 对存在漏洞与已修补的...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

whonow

Whonow DNS 服务器 一个恶意的 DNS 服务器，用于动态执行 DNS 重新绑定攻击。whonow 让你能够 通过域名请求本身 动态指定 DNS 响应和重新绑定规则。 root@kitploit: 首次查询该域名时响应 34.192.228.43，之后每次都响应 192.168.1.1 A.34.192.228.43.1time.192.168.1.1.forever.rebind.network 首次响应 34.192.228.43，接下来五次响应 192.168.1.1，然后重新开始（1次，5次，循环往复...）...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE 此 PoC 演示了攻击者如何将 Orange Tsai 的 CVE-2024-4577 与 DNS 重绑定链式结合，通过受害者的网页浏览器直接对内部网络基础设施实现远程代码执行。通过绕过 同源策略（SOP） 并利用运行在 本地 XAMPP 服务器、内部开发环境或企业网络上的易受攻击的 PHP-CGI 实例，该攻击能够在原本不应暴露于互联网的系统上实现完整的代码执行。 BLOG...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in WebKit2GTK

This issue has been addressed through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Processing maliciously crafted web content may bypass the Same Origin Policy...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been addressed through improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2, and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may allow bypass of the...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in the Network component of Google Chrome before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...