datadome-vm

DataDome VM 解析 概要 このリポジトリは、DataDome の CAPTCHA/インタスティシャルフローで使用されるブラウザ内 JavaScript 仮想マシン VM の初の公開版を文書化したものです。この解析では以下を扱います： バイトコードのロードおよびデコード機構 VM メモリレイアウトとアーキテクチャ 概念実証の逆アセンブラ 制御フロー解析のメモ 注記: このリポジトリは、静的 VM の1つのバージョンのみを対象としており、セキュリティ研究および解析目的で作成されています。動的ソルバーやプロダクション用ソルバーの実装は含まれていません。 背景...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

camjacking-templates

CamJacking CamJacking은 조직이 통제되고 승인된 환경에서 사용자에게 카메라 권한 위험, 브라우저 보안 및 사회공학 인식을 교육하도록 돕기 위해 설계된 보안 인식 훈련 및 시뮬레이션 프레임워크 입니다. 🎯 CamJacking이란 무엇인가요? CamJacking 은 통제된 실험실 환경에서 실제와 같은 카메라 권한 요청 프롬프트와 사용자 동의 시나리오를 시뮬레이션하도록 구축된 기업 중심의 사이버 보안 인식 프레임워크입니다. 조직이 다음을 수행할 수 있도록 돕습니다: ✅ 사용자에게 카메라 및 브라우저 권한 위험 교육 ...

CVE-2018-4416-exploit

Предисловие :PROPERTIES: :CUSTOMID: preface :END: Итак, безопасность бинарного кода — это не только /heap/ и /stack/, нам еще многое предстоит открыть, несмотря на обычные CTF-задачи. Браузер, виртуальная машина и ядро играют важную роль в безопасности бинарного кода. И я решил сначала изучить...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

WordPress Events Calendar <1.4.5 - Cross-Site Scripting

WordPress Events Calendar plugin before 1.4.5 contains multiple cross-site scripting vulnerabilities. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

browser-security-project

OWASP Browser Security Project The OWASP Browser Security Project raises awareness, provides education, and establishes best practices for securing modern web browsers. Browsers now serve as the primary execution environment for most applications, and this project offers clear, actionable guidanc...

EUVD-2026-78459

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92050

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

Astra Linux – Vulnerability in Firefox

When network partitioning was enabled, for example as a result of Enhanced Tracking Protection settings, a TLS error page allowed users to override an error on a domain that had specified HTTP Strict Transport Security. This means that the error should not be overwritten. This issue did not affec...

CVE-2026-87525

creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:55+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87495

creationtimestamp| type| source ---|---|--- 2026-09-10 04:48:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:07+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87429

creationtimestamp| type| source ---|---|--- 2026-09-10 04:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87443

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

GHSA-MCM5-J3P7-M443 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-84331

creationtimestamp| type| source ---|---|--- 2026-09-02 04:46:44+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260904 2026-09-08...

CVE-2026-84140 Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Chromium: CVE-2026-78953 Missing authorization in SiteIsolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...