EUVD-2026-93854

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106222

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Sync component. This issue allows a remote attacker to obtain sensitive information by sending crafted network traffic . The vulnerability is associated with CWE-863 and has a Chromium secur...

CVE-2026-106265

UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106184

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the Media component. A remote attacker can exploit this by hosting a crafted HTML page to obtain cross-origin data . The Chromium security severity for this issue is rated as High . No specific explo...

CVE-2026-106379

An uninitialized resource in the Skia library within Google Chrome versions prior to 155.0.8059.39 allows a remote attacker to obtain cross-origin data . The vulnerability is triggered by visiting a crafted HTML page . No specific exploit links or in-the-wild exploitation details are provided in ...

EUVD-2026-93820

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106332

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an integer overflow within the Compositing component. This flaw allows a remote attacker to obtain cross-origin data by interacting with a crafted HTML page. Information regarding active exploits is not provided in the documents.

CVE-2026-106203

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106308

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a High severity security issue caused by an incorrect reference resolution in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , which can then be u...

CVE-2026-106245

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a security flaw involving an uninitialized resource within the ANGLE component. A remote attacker can exploit this by using a crafted HTML page to obtain cross-origin data . This issue is classified with a high security severity. Rem...

EUVD-2026-93798

Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

noir

Caza cada Endpoint en tu código, expón Shadow APIs, mapea la Superficie de Ataque. Documentación • Instalación • Uso • Github Action • Contribuir • Changelog Noir es una herramienta SAST que lee el código fuente y extrae los endpoints que expone una aplicación — rutas, métodos, parámetros,...

ImproHound

ImproHound Identifica las rutas de ataque en BloodHound que rompen tu segmentación por niveles de AD ImproHound es un ejecutable independiente de dotnet para Windows x64 con interfaz gráfica. Para usar ImproHound, debes ejecutar SharpHound para recolectar los datos necesarios del AD. Luego, subir...

RTA

Red Team Arsenal Red Team Arsenal es un marco interno creado por el equipo de seguridad de flipkart que monitorea la superficie de ataque externa de los activos en línea de la empresa y proporciona una vista holística de seguridad de cualquier anomalía de seguridad. Es una colección estrechamente...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

pentest-a2p2v-core

LÉAME Automated Attack Path Planning and Validation A2P2V es una herramienta de planificación y ciberataque que proporciona la capacidad a los usuarios de determinar un conjunto de secuencias de ataque clasificadas dado un objetivo específico del atacante. El objetivo de la herramienta es...

CVE-2026-55307

A logic error in the kdn_set_sysregs_prot function within the hwcrypto-kdn.c file can lead to a local information disclosure . Exploitation of this vulnerability requires System execution privileges , and no user interaction is required. While the technical impact is classified as partial, the co...

AWS-Tough-Library-Multiple-CVEs

AWS Tough Library Multiple CVEs In March 2025, multiple security vulnerabilities were disclosed in AWS Labs’ Tough library a Rust client implementation of TUF – The Update Framework. These issues are tracked under CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 and CVE-2025-2888, and were fixed in...

CVE-2026-105485

The Devolutions Server (version 2026.3.7.0 and earlier) is susceptible to an authentication bypass within the OAuth device authorization flow . A remote attacker can achieve full account takeover of an authenticated victim by replaying a captured device verification link . The vulnerability is ca...

EUVD-2026-93782

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...