9245 matches found
dref
DNS Rebinding Exploitation Framework This project is no longer maintained. dref does the heavy-lifting for DNS rebinding. The following snippet from one of its built-in payloads shows the framework being used to scan a local subnet from a hooked browser; after identifying live web services it...
singularity
Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...
whonow
Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and then 192.168.1...
CVE-2026-121174
A missing authorization flaw was found in the BackgroundFetch component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/496008447 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...
CVE-2026-121107
An incorrect authorization flaw was found in the BackgroundFetch component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/485855931 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending...
CVE-2026-121087
An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570028521 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...
EUVD-2026-116385
Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-120930
Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-121141
An improper input validation flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/578083806...
CVE-2026-120930
Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-120930
A high-severity incorrect authorization vulnerability in the Blink engine of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to bypass the web origin policy . This issue can be triggered by a victim visiting a crafted HTML page . No specific exploit details or in-the-wild...
CVE-2026-121251
Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-121252
Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-121242
Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-121236
Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-121222
Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-121212
Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-121204
Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-121205
Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...