CVE-2026-85044

A flaw was found in Google Chrome on Android. This vulnerability involves the improper use of a released resource, which could allow a remote attacker to bypass the web origin policy. The web origin policy is a security mechanism that prevents malicious websites from interacting with legitimate...

EUVD-2026-70713

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-85044

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-85044

CVE-2026-85044 is a use of released resource flaw in the Mobile component of Google Chrome on Android (versions prior to 152.0.7977.82 ). A remote attacker, leveraging social engineering and a crafted HTML page, can bypass the web origin policy , allowing unauthorized cross-site interaction with ...

CVE-2026-85044

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” Why break in when someone might open the door? That idea runs through this edition. Attackers use real tools, fake login pages, old account links, and software guides...

CVE-2026-3852

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

CVE-2026-59346

creationtimestamp| type| source ---|---|--- 2026-09-03 09:23:29+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mum4u7nhcr2x 2026-09-03 23:24:06+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3munltczhhi2c 2026-09-04 05:02:17+00:00| seen|...

CVE-2026-20280

creationtimestamp| type| source ---|---|--- 2026-09-03 08:46:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 11:04:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mumcje5hr22b 2026-09-03 11:04:47+00:00| seen|...

CVE-2026-3852

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skype_url shortcode attribute in the Social Media Follow module, affecting all versions up to and including 4.27.6 . The root cause is a three-part sanitization failure: the field is excluded from the $url_options w...

EUVD-2026-70362

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

CVE-2026-3852 Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...

ShadowPhish

🕵️‍♂️ ShadowPhish - APT Awareness Toolkit Versión: 1.0 Autor: Joas A Santos Simulador visual para concienciación sobre ciberseguridad, phishing e ingeniería social basada en APT. 🔥 Características ✅ Generador de PDF malicioso ✅ Macro de Word con shellcode remoto ✅ Ofuscación de PowerShell Base64,...

CVE-2026-85031

creationtimestamp| type| source ---|---|--- 2026-09-03 03:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muljo6ffhc2l...

PT-2026-85233

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.82 Description A use of released resource issue in the mobile component allows a remote attacker to bypass the web origin policy. This is achieved by leveraging social engineering to entice...

CVE-2026-78689

creationtimestamp| type| source ---|---|--- 2026-09-02 18:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukjonpqaf2t 2026-09-02 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muklimnqxi2o 2026-09-02 19:12:02+00:00| seen|...

CVE-2026-82404

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbhhcji2a 2026-09-02 19:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d72zrvwkyefas 2026-09-03 20:50:05+00:00| seen|...

CVE-2026-20274

creationtimestamp| type| source ---|---|--- 2026-09-02 16:36:40+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117202419724203546 2026-09-02 18:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukjp7pzgv22 2026-09-02 20:40:07+00:00| seen|...

CVE-2026-81286

creationtimestamp| type| source ---|---|--- 2026-09-02 14:07:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4ahvex52t 2026-09-02 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkeslksq22...

CVE-2026-18924

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-08 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzfvusbze2b 2026-09-08 20:03:22+00:00| seen|...