CVE-2018-4416-exploit

Prefacio :PROPERTIES: :CUSTOMID: preface :END: De acuerdo, la seguridad binaria no solo se trata de /heap/ y /stack/, todavía tenemos mucho por descubrir más allá de los desafíos CTF habituales. El navegador, la máquina virtual y el kernel juegan un papel importante en la seguridad binaria. Y...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

camjacking-templates

CamJacking CamJacking es un framework de concienciación y simulación de seguridad diseñado para ayudar a las organizaciones a educar a los usuarios sobre los riesgos de los permisos de cámara, la seguridad del navegador y la concienciación sobre ingeniería social en entornos controlados y...

WordPress Events Calendar <1.4.5 - Cross-Site Scripting

WordPress Events Calendar plugin before 1.4.5 contains multiple cross-site scripting vulnerabilities. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

datadome-vm

Análisis de la VM de DataDome Resumen Este repositorio documenta la primera versión pública de la máquina virtual VM de JavaScript en el navegador de DataDome, utilizada en su flujo CAPTCHA/intersticial. Este análisis cubre: Mecanismos de carga y decodificación de bytecode Diseño y arquitectura d...

browser-security-project

OWASP Browser Security Project The OWASP Browser Security Project raises awareness, provides education, and establishes best practices for securing modern web browsers. Browsers now serve as the primary execution environment for most applications, and this project offers clear, actionable guidanc...

CVE-2026-87525

creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910...

CVE-2026-87495

creationtimestamp| type| source ---|---|--- 2026-09-10 04:48:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910...

CVE-2026-87429

creationtimestamp| type| source ---|---|--- 2026-09-10 04:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910...

CVE-2026-87443

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

GHSA-MCM5-J3P7-M443 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-84331

creationtimestamp| type| source ---|---|--- 2026-09-02 04:46:44+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260904 2026-09-08...

CVE-2026-84140 Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Chromium: CVE-2026-78953 Missing authorization in SiteIsolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Opera bug bounty: How vulnerability research is evolving with AI

Security Opera bug bounty: How vulnerability research is evolving with AI Share August 28th, 2026 Hi Opera users! Browser security is constantly evolving, and so are the ways vulnerabilities are discovered. At Opera, we heavily invest in securing our products and services through the efforts of o...

CVE-2026-79176

creationtimestamp| type| source ---|---|--- 2026-08-26 05:15:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-31 05:15:25+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-79026

creationtimestamp| type| source ---|---|--- 2026-08-26 04:49:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260826 2026-08-26 17:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtytr344to2e 2026-08-31 04:49:10+00:00| seen|...