140 matches found
malicious_extension_sentry
Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software 🌐 Live Dashboard Real-time search, filtering by threat category, and source reports, built on...
ExtAnalysis
Features • Installation • Use • Modules Used • Screenshots • License With ExtAnalysis you can : Download & Analyze Extensions From: Chrome Web Store Firefox Addons Analyze Installed Extensions of: Google Chrome Mozilla Firefox Opera Browser Coming Soon Upload and Scan Extensions. Supported format...
CVE-2026-103524
Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitization and is later rendered in the administrator interface and/or the web store's product pages, allowing arbitrary...
CVE-2026-103524
Thelia v2.6.0 is susceptible to multiple stored XSS vulnerabilities within its administrative interface. The root cause is the storage of user-supplied input without sufficient output encoding or sanitization , which is subsequently rendered in the administrator interface and web store product pa...
EUVD-2026-97477
Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitization and is later rendered in the administrator interface and/or the web store's product pages, allowing arbitrary...
PT-2026-110604
Name of the Vulnerable Software and Affected Versions Thelia version 2.6.0 Description Multiple stored Cross-Site Scripting XSS issues exist within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitization and is subsequently rendered in the...
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to intercept browser traffic and route them through a proxy infrastructure. The extensions, published across at least 40 Chrome Web Store...
malicious_extension_sentry — Updated!
Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software 🌐 Live Dashboard Real-time search, filtering by threat category, and source reports, built on...
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the extension, named Adblock for YouTube, has more than 10 million installs and carries a Featured badge on the Chrome Web Store. The extensio...
CVE-2026-8879
Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately...
CVE-2026-8879
Version 3.0.7 of the Securly Chrome Extension is vulnerable to a security flaw where it dynamically registers content13.min.js as a content script at runtime via chrome.scripting.registerContentScripts(). Because this script is not declared in the manifest.json file, it bypasses the Chrome Web St...
PT-2026-46051
Name of the Vulnerable Software and Affected Versions Securly Chrome Extension version 3.0.7 Description The software dynamically registers content13.min.js as a content script at runtime using the chrome.scripting.registerContentScripts function. Because this script is not declared in the...
How to find and remove credential-stealing Chrome extensions
Researchers have found yet another family of malicious extensions in the Chrome Web Store. This time, 30 different Chrome extensions were found stealing credentials from more than 260,000 users. The extensions rendered a full-screen iframe pointing to a remote domain. This iframe overlaid the...
New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan
In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...
New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan
In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...
$6,000 “Stanley” Toolkit Sold on Russian Forums Fakes Secure URLs in Chrome
Say hello to Stanley, a new malicious toolkit that guarantees bypassing Google’s Chrome Web Store review process...
CampCodes Retro Basketball Shoes Online Store 跨站脚本漏洞
CampCodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from CampCodes, Inc. A code injection vulnerability exists in CampCodes Retro Basketball Shoes Online Store version 1.0, which stems from an incorrect manipulation of the parameter productname in the file...
EUVD-2013-0896
Malware in sbrugna...