CVE-2024-36527

CVE-2024-36527 PoC e Scanner in Massa Panoramica POC per CVE-2024-36527: puppeteer-renderer v.3.2.0 e precedenti è vulnerabile a Directory Traversal. Gli attaccanti possono sfruttare il parametro URL usando il protocollo file per leggere informazioni sensibili dal server. Basato sull'avviso di...

CVE-2023-6702

Chrome Renderer 1day RCE tramite Confusione di Tipo in Async Stack Trace CVE-2023-6702 Riepilogo Questa vulnerabilità permetteva a un attaccante remoto di eseguire codice arbitrario all'interno del processo renderer di Chrome. C'era un controllo di tipo insufficiente nel codice di gestione dello...

PoC

PoC Una raccolta di codici proof-of-concept di DARKNAVY. CVE-2025-43300 Target: iOS && macOS Versione: precedente a iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Versione: precedente a 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Versione: precedente a 125.0.6422.112 Blo...

Vulnerability_PoC

Le PoC/Exploit di alcune vulnerabilità interessanti Autore: Vulnerability Research Team di Numen Cyber Labs 1. Vulnerabilità RCE TCP/IP CVE-2022–34718 Ricostruzione e analisi della PoC...

CVE-2026-54433

CVE-2026-54433: Roundcube प्लेन-टेक्स्ट ईमेल स्टोर्ड XSS इस रिपॉजिटरी में CVE-2026-54433 के लिए एक कॉन्फ़िगर करने योग्य Python प्रूफ ऑफ कॉन्सेप्ट है, जो Roundcube के प्लेन-टेक्स्ट ईमेल रेंडरर में एक स्टोर्ड क्रॉस-साइट स्क्रिप्टिंग भेद्यता है। एक अनप्रमाणित प्रेषक एक विशेष रूप से तैयार text/plain...

CVE-2026-2441

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 Hoch | Aktiv in freier Wildbahn ausgenutzt | Renderer-RCE Sandboxed Eine Use-After-Free-Sicherheitslücke in Google Chromes Blink-CSS-Engine, die es einem entfernten Angreifer ermöglicht, über eine präparierte HTML-Seite...

CVE-2026-6307-Longinus

CVE-2026-6307-Longinus Confusione di tipo in V8 TurboFan inlining di chiamate JS-to-Wasm + fusione FrameState Meglio conosciuto come 'Longinus': 2 confini in un unico bug Repository: https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus Rapporto dettagliato: OS-IS-CVE-2026-6307-07-2026.md...

CVE-2025-2783

Chromium CVE-2025-2783: Escape de Sandbox & Exploit RCE de Cadeia Completa Este repositório contém uma implementação de exploit de cadeia completa para CVE-2025-2783. A vulnerabilidade reside na camada de comunicação Ipcz do Chromium, permitindo que um atacante obtenha escape de sandbox e execuçã...

CVE-2022-28281

CVE-2022-28281: Mozilla Firefox – Schreibzugriff außerhalb der Grenzen aufgrund unerwarteter WebAuthN-Erweiterungen Dies ist ein Fehler, der von einem kompromittierten Windows-Firefox-Renderer-Prozess ausgelöst werden kann. Wenn ein kompromittierter Content-Prozess eine unerwartete Anzahl von...

CVE-2019-9810

CVE-2019-9810 Exploit für Firefox unter Windows CVE-2019-9810 ist eine Schwachstelle, die auf der Pwn2Own 2019 von Richard Zhu und Amat Cama gefunden und ausgenutzt wurde. Es betrifft Mozillas JavaScript-Engine Spidermonkey und wurde verwendet, um den Renderer zu kompromittieren. Das Problem wurd...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0 , the default-on Safe import filter sanitizes HTML only for text notes but excludes the book note type. Book note content is stored unsanitized and later injected into the page via jQuery's htm...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

EUVD-2026-67223

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-2441-PoC

CVE-2026-2441-PoC PoC per CVE-2026-2441 PoC per Use-After-Free in CSS di Chrome Blink CSSFontFeatureValuesMap PoC che attiva la UAF nell'elaborazione CSS → RCE nel renderer all'interno della sandbox su Chrome =144.0.x tutte le piattaforme. Trigger: @font-feature-values + container-query + ricalco...

CVE-2026-2441-PoC

CVE-2026-2441 — Use-After-Free in Chrome CSSFontFeatureValuesMap CVSS 8.8 Alto | Sfruttata attivamente in natura | RCE nel Renderer Sandboxed Una vulnerabilità use-after-free nel motore CSS Blink di Google Chrome che consente a un attaccante remoto di eseguire codice arbitrario all'interno della...

CVE-2026-20841

CVE-2026-20841 – Windows-Notepad-RCE PoC für eine Schwachstelle zur Remote-Codeausführung im Markdown-Renderer von Windows Notepad. Die Markdown-Engine schränkt URL-Protokolle nicht ein, sodass über klickbare Links beliebige Protokoll-Handler ausgelöst werden können. Haftungsausschlüsse 1. Nicht...

CVE-2026-20841

CVE-2026-20841 - RCE in Blocco note di Windows PoC per una vulnerabilità di esecuzione remota di codice nel renderer Markdown del Blocco note di Windows. Il motore Markdown non limita i protocolli URL, consentendo l'attivazione di gestori di protocollo arbitrari tramite link cliccabili...

CVE-2025-2783

Chromium CVE-2025-2783: Escape dalla Sandbox & Exploit RCE a Catena Completa Questo repository contiene un'implementazione di exploit a catena completa per CVE-2025-2783. La vulnerabilità risiede nel layer di comunicazione Ipcz di Chromium, consentendo a un attaccante di ottenere escape dalla...

webscreenshot

webscreenshot الوصف نص برمجي بسيط لأخذ لقطات شاشة لقائمة من المواقع، يعتمد على نص url-to-image الخاص بـ PhantomJS. الميزات دمج ميزة 'lazy-rendering' من url-to-image للموارد AJAX يعمل بكامل وظائفه على أنظمة Windows و Linux دعم تعريف الكوكيز ورؤوس HTTP المخصصة لمحرك العرض PhantomJS المعالجة المتعدد...

CVE-2026-79265

A flaw was found in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit an incomplete cleanup vulnerability in the GetUserMedia component. This could allow them to obtain sensitive information via a crafted HTML page...