CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in WebRTC within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page , leading to arbitrary code execution inside the sandbox . Chromium rates the severity as High . The f...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79202

CVE-2026-79202 is a use after free vulnerability in Chromecast within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to execute arbitrary code inside the sandbox . Chromium assigns it a High severity rating. The fix is availa...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79069

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79195

CVE-2026-79195 is a use-after-free vulnerability in the Script component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The Chromium project assigned this a High severity rating...

CVE-2026-79195

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-65766

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

CVE-2026-79290 is a use-after-free vulnerability in the Aura component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the sandbox , rated Critical by Chromium. The fix is available in Chrome 152.0.7977.65 and la...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

commend_sqli

CVE-2023-XXXXX Descrizione suggerita L'interfaccia web di G8-VOIPREC Commend VoIPRec è vulnerabile a iniezioni SQL cieche basate sul tempo nel parametro "Code" nella pagina di login. Informazioni aggiuntive PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11...

firecrawl-mcp-server

Firecrawl MCP Server Un server Model Context Protocol MCP che porta Firecrawl agli agenti AI compatibili con MCP — cerca, raspa e interagisci con il web live per un contesto pulito e pronto per gli agenti. Un grande ringraziamento a @vrknetha e @knacklabs per l'implementazione iniziale!...

DVR-Exploiter

DVR-Exploiter root@kitploit: Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter 제작: Belahsan Ouerghi 연락처: www.facebook.com/ouerghi.belahsan Youtube 튜토리얼: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login" html:"/login.rsp"...

zphisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related toZphisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit

Introduzione Questo exploit è stato sviluppato basandosi sulla descrizione tecnica di depthsecurity root@kitploit: https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices Descrizione L'applicazione web di gestione HTTP sui dispositivi Edgewater Networks...

EUVD-2026-65620

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, and the text of an h4 element in the pa...

CVE-2026-26211

Ekushey Project Manager CRM 5.0 is affected by a stored XSS vulnerability in the administrator-configured system name field. The value is written to the login page without output encoding, and its occurrence in an h4 element is parsed as markup, causing any injected HTML event handlers to execute...

ChangeTower

ChangeTower ChangeTower è pensato per aiutarti a monitorare le modifiche nelle pagine web e ricevere notifiche di qualsiasi cambiamento, scritto in Go. Questo strumento è utile per sapere se le pagine web sono state aggiornate o meno, per lavorare sul nuovo sito prima degli altri. Istruzioni per...