CVE-2026-79175

A flaw was found in Google Chrome's Accessibility component. A remote attacker, who has already compromised the renderer process, could exploit a type confusion vulnerability by crafting a malicious HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79183

A flaw was found in chromium-browser. This vulnerability, a 'use after free' error in the Accessibility component of Google Chrome, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation requires social engineering and user interaction with...

CVE-2026-79155

A flaw was found in Google Chrome. A race condition in the FileSystem component could allow a remote attacker, who has already compromised the browser's renderer process, to execute arbitrary code outside of the security sandbox. This exploitation is possible through a specially crafted HTML page...

CVE-2026-79149

A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-79139

A flaw was found in Google Chrome. This improper input validation vulnerability in the Media component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker...

CVE-2026-79142

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...

CVE-2026-79140

A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system...

CVE-2026-79121

A flaw was found in Chromecast in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a crafted HTML page, leading to a critical...

CVE-2026-79111

A flaw was found in Dawn in Google Chrome. A remote attacker could exploit improper input validation by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79083

A flaw was found in Google Chrome's Media component. A remote attacker, who has already compromised the browser's renderer process, could exploit an improper enforcement of behavioral workflow. By presenting a specially crafted HTML page, the attacker could potentially execute unauthorized code...

CAPE-parsers

CAPE-parsers Parser core e della community di CAPE Struttura dei configs root@kitploit: CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Catena completa n8n Lettura arbitraria di file non autenticata → Forgiatura token admin → Bypass sandbox → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critico Interessate| = 0.211.0 RCE Corretta| 1.121.0 AFR / 1.120.4+ RCE Divulgat...

Update Chrome before you browse again

Chrome is rolling out an update for its desktop browser. The update includes 327 security fixes, ten of which address critical vulnerabilities. The stable channel has been updated to 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. How to update Chrome If you don’t want to wait...

CVE-2026-78891

A flaw was found in WebRTC in Google Chrome. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized control over the affected system...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Sfrutta CVE-2024-0044 per l'escalation dei privilegi su Android e il download dei file sandbox di qualsiasi app target. Utilizzo root@kitploit: ./CVE-2024-0044.sh Parametri root@kitploit: Percorso di un file APK locale qualsiasi Nome del pacchetto dell'app target Esempio...

CVE-2024-4040

CVE-2024-4040 Una vulnerabilità di server side template injection in CrushFTP in tutte le versioni precedenti alla 10.7.1 e 11.1.0 su tutte le piattaforme consente a utenti remoti non autenticati di leggere file dal filesystem al di fuori della VFS Sandbox, aggirare l'autenticazione per ottenere...

cve-2024-0044

CVE-2024-0044 CVE-2024-0044 एक "run-as" हमले को करने की अनुमति देता है, जिसके परिणामस्वरूप विशेषाधिकारों का स्थानीय उन्नयन होता है। यह एक हमलावर को मोबाइल डिवाइस पर किसी भी एप्लिकेशन द्वारा स्थानीय रूप से संग्रहीत निजी फ़ाइलों तक पहुंचने में सक्षम बनाता है, जो "एप्लिकेशन सैंडबॉक्स" द्वारा प्रदान ...

SandBox_CVE-2021-23358

इस रिपॉजिटरी में README नहीं है।...

UnjailMe

UnjailMe Un'evasione dalla sandbox basata su: il proof-of-concept CVE-2018-4087 di Rani Idan Zimperium il proof-of-concept dell'overflow di securityd di @cheesecakeufo zeroday, nessuna CVE nota, grazie Abraham! A proposito del PoC di ZIMPERIUM Rani ha usato sbtool di Jonathan Levine per scoprire...

SnatchBox

SnatchBox O SnatchBox CVE-2020-27935 é uma vulnerabilidade de fuga da sandbox que afeta o macOS até a versão 10.15, bem como as primeiras versões beta do macOS 11.0. O impacto mais significativo do SnatchBox é que ele permite que um editor malicioso escape da sandbox não opcional da Mac App Store...