CVE-2026-79174

Incorrect authorization in the Extensions component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass the web origin policy into a privileged page via a crafted HTML page. Chromium rated the severity as High . The fix is a...

CVE-2026-79111

CVE-2026-79111 is an improper input validation vulnerability in the Dawn component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. Chromium classifies the se...

CVE-2026-79093

CVE-2026-79093 is an incorrect authorization flaw in the Paint component of Google Chrome prior to 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by luring a user into opening a crafted HTML page . Chromium rated the severity High . The fix is available in the st...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79288

CVE-2026-79288 is an improper input validation flaw in the Autofill component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker can exploit this by serving a crafted HTML page to a user, potentially obtaining sensitive information . The issue was rated High severity by the Ch...

CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in WebRTC within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , leading to arbitrary code execution inside the sandbox . Chromium rates the severity as High . The f...

CVE-2026-79202

CVE-2026-79202 is a use after free vulnerability in Chromecast within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to execute arbitrary code inside the sandbox . Chromium assigns it a High severity rating. The fix is availa...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

CVE-2026-79195 is a use-after-free vulnerability in the Script component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The Chromium project assigned this a High severity rating...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

CVE-2026-79290 is a use-after-free vulnerability in the Aura component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the sandbox , rated Critical by Chromium. The fix is available in Chrome 152.0.7977.65 and la...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

dirtyfrag

Dirty Frag: تصعيد امتيازات محلي شامل لأنظمة لينكس الملخص توثّق هذه الوثيقة فئة الثغرات Dirty Frag، التي اكتشفها وأبلغ عنها لأول مرة Hyunwoo Kim @v4bel، والتي يمكنها الحصول على صلاحيات الجذر على توزيعات لينكس الرئيسية من خلال ربط ثغرة xfrm-ESP Page-Cache Write CVE-2026-43284 وثغرة RxRPC Page-Cache...

commend_sqli

CVE-2023-XXXXX Descrição sugerida A interface web do G8-VOIPREC Commend VoIPRec é vulnerável a injeções SQL cegas baseadas em tempo no parâmetro "Code" na página de login. Informações Adicionais PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x866...

firecrawl-mcp-server

Firecrawl MCP Server Ein Model Context Protocol MCP-Server, der Firecrawl zu MCP-kompatiblen KI-Agenten bringt – durchsuchen, scrapen und mit dem Live-Web interagieren für sauberen, agentenbereiten Kontext. Großer Dank an @vrknetha, @knacklabs für die erste Implementierung! Funktionen Das Web...

DVR-Exploiter

DVR-Exploiter root@kitploit: Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter 제작: Belahsan Ouerghi 연락처: www.facebook.com/ouerghi.belahsan Youtube 튜토리얼: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login" html:"/login.rsp"...

CVE-2026-31282

CVE-2026-31282 Descrição Totara LMS é vulnerável a Controle de Acesso Incorreto. O código da página de login pode ser manipulado para revelar o formulário de login e contornar o login do Octa. Um atacante pode combinar isso com a ausência de limite de taxa no formulário de login para lançar um...

zphisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related toZphisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit

Introduction Cette exploitation a été développée sur la base de la description technique de depthsecurity root@kitploit: https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices Description L'application de gestion web HTTP sur les appareils Edgewater...

EUVD-2026-65620

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, and the text of an h4 element in the pa...