CVE-2026-79140

A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...

CVE-2026-79121

A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...

CVE-2026-79111

A flaw was found in Dawn in Google Chrome. A remote attacker could exploit improper input validation by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79083

A flaw was found in Google Chrome's Media component. A remote attacker, who has already compromised the browser's renderer process, could exploit an improper enforcement of behavioral workflow. By presenting a specially crafted HTML page, the attacker could potentially execute unauthorized code...

CAPE-parsers

CAPE-parsers Parser core e della community di CAPE Struttura dei configs root@kitploit: CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Catena completa n8n Lettura arbitraria di file non autenticata → Forgiatura token admin → Bypass sandbox → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critico Interessate| = 0.211.0 RCE Corretta| 1.121.0 AFR / 1.120.4+ RCE Divulgat...

Update Chrome before you browse again

Chrome is rolling out an update for its desktop browser. The update includes 327 security fixes, ten of which address critical vulnerabilities. The stable channel has been updated to 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. How to update Chrome If you don’t want to wait...

CVE-2026-78891

A flaw was found in WebRTC in Google Chrome. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized control over the affected system...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Sfrutta CVE-2024-0044 per l'escalation dei privilegi su Android e il download dei file sandbox di qualsiasi app target. Utilizzo root@kitploit: ./CVE-2024-0044.sh Parametri root@kitploit: Percorso di un file APK locale qualsiasi Nome del pacchetto dell'app target Esempio...

CVE-2024-4040

CVE-2024-4040 Una vulnerabilità di server side template injection in CrushFTP in tutte le versioni precedenti alla 10.7.1 e 11.1.0 su tutte le piattaforme consente a utenti remoti non autenticati di leggere file dal filesystem al di fuori della VFS Sandbox, aggirare l'autenticazione per ottenere...

cve-2024-0044

CVE-2024-0044 CVE-2024-0044 एक "run-as" हमले को करने की अनुमति देता है, जिसके परिणामस्वरूप विशेषाधिकारों का स्थानीय उन्नयन होता है। यह एक हमलावर को मोबाइल डिवाइस पर किसी भी एप्लिकेशन द्वारा स्थानीय रूप से संग्रहीत निजी फ़ाइलों तक पहुंचने में सक्षम बनाता है, जो "एप्लिकेशन सैंडबॉक्स" द्वारा प्रदान ...

SandBox_CVE-2021-23358

इस रिपॉजिटरी में README नहीं है।...

UnjailMe

UnjailMe Un'evasione dalla sandbox basata su: il proof-of-concept CVE-2018-4087 di Rani Idan Zimperium il proof-of-concept dell'overflow di securityd di @cheesecakeufo zeroday, nessuna CVE nota, grazie Abraham! A proposito del PoC di ZIMPERIUM Rani ha usato sbtool di Jonathan Levine per scoprire...

SnatchBox

SnatchBox O SnatchBox CVE-2020-27935 é uma vulnerabilidade de fuga da sandbox que afeta o macOS até a versão 10.15, bem como as primeiras versões beta do macOS 11.0. O impacto mais significativo do SnatchBox é que ele permite que um editor malicioso escape da sandbox não opcional da Mac App Store...

DEBIAN-CVE-2026-79111

Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-79236

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-78999

Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity:...

DEBIAN-CVE-2026-79132

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-78910

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...