noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

browser-backdoor

BrowserBackdoor BrowserBackdoorは、JavaScript WebSocket Backdoorを使用してリスナーに接続するElectronアプリケーションです。 BrowserBackdoorServerは、着信WebSocket接続をリッスンし、リモートシステムにコマンドを送信するためのコマンドラインインターフェースを作成するWebSocketサーバーです。 BrowserBackdoor内のJavaScriptバックドアは、WebSocketをサポートするすべてのブラウザで使用できます。BrowserBackdoor...

heartbleedchecker-chrome

このリポジトリには README がありません。...

CheckFlashPlayerVersion

CheckFlashPlayerVersion ブラウザの Flash Player バージョンを確認し、CVE-2016-7855 の脆弱性に対して脆弱かどうかをチェックします 使用方法: このリポジトリをクローンし、Flash Player のバージョンを確認したいブラウザで HTML ファイルを開いてください。...

s3cXSSer

s3cXSSer この拡張機能は、任意のWebサイトでGET/POSTベースのXSS脆弱性を簡単に検出するのに役立ちます。 S3C - XSSER - Chrome拡張機能 ChromeまたはBraveブラウザに追加する方法 1- brave://extensions/ または chrome://extensions/ に移動します 2- デベロッパーモードを有効にして「Load unpacked」をクリックします 3- 拡張機能のフォルダーを探して「OK」をクリックします 注意:...

CVE-2026-100589

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589

OpenClaw versions before 2026.7.1 are vulnerable to a sandbox bypass in the browser tool. Despite an allowHostControl=false configuration, sandboxed sessions can access paired node browser actions. Attackers who control sandboxed agent input can select a paired node to perform host browser operat...

EUVD-2026-87462

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589: Incorrect Authorization

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

PT-2026-99225

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.7.1 Description A sandbox bypass exists in the browser tool that allows sandboxed sessions to access paired node browser actions, even when the allowHostControl variable is set to false. An attacker who controls...

CVE-2026-84425

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-84425 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-84425

zhayujie CowAgent (versions up to 2.1.3) is vulnerable to a remote denial of service in the BrowserTool function within agent/tools/browser/browser_tool.py (the Browser Tool component). An attacker with low privileges can trigger the DoS remotely with low complexity and no user interaction. A pro...

CVE-2026-84425 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

PT-2026-84570

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browser tool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-84425: Improper Resource Shutdown or Release

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-18775

A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects the function browsersnapshot of the file tools/browsertool.py of the component Browser Tooling. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The...