EUVD-2026-89622

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

CVE-2026-89193

The Robin Image Optimizer WordPress plugin, in versions prior to 2.0.8 , is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin's bundled HTML parser fails to escape values re-emitted into element attributes when a non-default image delivery mode is enabled. This ...

pisiguard

PISIGuard Protege tu información personal y sensible cuando chateas con IA PISIGuard : P ersonally I dentifiable & S ensitive I nformation Guard Demo de PISIGuard: los datos sensibles se detectan, enmascaran y restauran directamente en el navegador Construí PISIGuard porque me horroriza cuánta...

S3BucketList

S3BucketList 搜索、列出并检查浏览时网络请求中发现的 S3 Bucket。 功能 过滤 S3 Bucket 提取 ACL 权限 下载已记录的存储桶 管理已记录的存储桶 按标签页记录存储桶 检测未认领 / 挂起 / 易受攻击的存储桶 安装 Chrome 您可以从 Chrome 网上应用店 安装此扩展，或者： 1. 从 最新版本 下载。 2. 解压下载的 zip 文件。 3. 在 Chrome 浏览器右上角，点击三个点。 4. 选择 更多工具 扩展程序，并启用 开发者模式。 5. 点击 加载已解压的扩展程序，然后选择解压后的文件夹。 Firefox 您可以从 Firefox 附加...

on-device-browser-agent

Local Browser - Automatización Web con IA en Dispositivo Pronto lanzaremos soporte para runanywhere-web-sdk en nuestro repositorio principal: échale un vistazo: https://github.com/RunanywhereAI/runanywhere-sdks Una extensión de Chrome que utiliza WebLLM para ejecutar automatización web con IA...

OnionBrowser

Onion Browser Official Site | Support | Release History | Donate © 2012-2024, Tigas Ventures, LLC Mike Tigas This is the Onion Browser3.X branch. The older versions of Onion Browser can be found here and here. Onion Browser is a free web browser for iPhone and iPad that encrypts and tunnels web...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

spybrowse

BrowseSpy Asegúrate de cambiar las variables ftp en todo el código; estas variables contienen el nombre de usuario, la contraseña y la dirección IP del servidor FTP que recibe los archivos. Este código hará lo siguiente: 1. Se copiará a sí mismo en el directorio %TMP% y se nombrará ursakta.exe 2...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

CVE-2026-102331

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside of the application sandbox via a buffer overflow in the ANGLE Almost Native Graphics Engine component. An attacker could exploit this vulnerability by enticing a user to visit a...

jspanda

JSPanda JSpanda 是一个客户端原型污染漏洞扫描器。它有两个关键特性：扫描所提供的URL的漏洞，以及分析JavaScript库的源代码。然而，JSpanda 无法检测高级的原型污染漏洞。 JSPanda 如何工作？ 使用多种 payload 来检测原型污染漏洞。 收集目标中的所有链接进行扫描，并将 payload 添加到 JSpanda 获取的 URL 中，使用无头 Chromedriver 导航到每个 URL。 扫描潜在易受攻击的 JavaScript 库源代码中的所有单词，并通过查找脚本 gadget 创建一个简单的 JS PoC，帮助您手动分析代码。 要求 下载最新版本...

warpgate

Warpgate es un bastion host inteligente y totalmente transparente para SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP y VNC que no requiere una aplicación cliente ni un wrapper de SSH. Configúralo en tu DMZ, añade cuentas de usuario y asígnalas fácilmente a hosts y URLs específicos dentro de la...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

SOC-Multitool

SOC Multi-tool 介绍 SOC Multi-tool，一款免费开源的浏览器扩展，让调查工作更快速、更高效。现已上架 Chrome 网上应用商店，并兼容所有基于 Chromium 的浏览器，如 Microsoft Edge、Chrome、Brave 和 Opera。 现可在 Chrome 网上应用商店获取！ 现可在 Firefox 附加组件商店获取！ 上榜： 22 在 GitHub 趋势榜！ "Awesome Incident Response"！ "Awesome Threat Detection"！ "Bad Sector Blogs"！ "Kali Linux...

IronFox

IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying problem?...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

url-regex-safe

url-regex-safe Expresión regular para coincidir con URLs. Versión mantenida, segura y compatible con navegadores de url-regex. Resuelve CVE-2020-7661cve para servidores Node.js. Funciona en Node v14+ y navegadores. Mantenido para Spam Scannerspam-scanner y Forward Emailforward-email. Tabla de...

SharpWeb

SharpWeb Introducción SharpWeb es un proyecto compatible con .NET 2.0 CLR que puede recuperar credenciales guardadas de Google Chrome, Firefox, Internet Explorer y Microsoft Edge. En el futuro, este proyecto se ampliará para recuperar cookies e historial de estos navegadores. Uso Usage:...

ExtAnalysis

Características • Instalación • Uso • Módulos utilizados • Capturas de pantalla • Licencia Con ExtAnalysis puedes : Descargar y analizar extensiones de: Chrome Web Store Firefox Addons Analizar extensiones instaladas de: Google Chrome Mozilla Firefox Opera Browser Próximamente Subir y escanear...

macsurf

La web moderna, en un Mac de hace 25 años. Un navegador nativo para la era Carbon, desde Mac OS 8.6 hasta Mac OS X 10.6: CSS real, JavaScript moderno y HTTPS en el propio Mac. Sin proxy, sin una segunda máquina. MacSurf 2.0.5 en un Power Mac G3 iMac, renderizandohackaday.com a ancho de escritorio...