hindsight

Hindsight Internet history forensics for Google Chrome/Chromium and Mozilla Firefox Hindsight is a free tool for analyzing web artifacts. It started with the browsing history of the Google Chrome web browser, has expanded to support other Chromium-based applications, and now also parses Mozilla...

boringssl

BoringSSL BoringSSL は、Google のニーズを満たすために設計された OpenSSL のフォークです。 BoringSSL はオープンソースプロジェクトですが、OpenSSL のように一般的な 利用を意図したものではありません。第三者がこれに依存することをお勧めしません。 API や ABI の安定性が保証されていないため、依存することはおそらく苛立たしい 結果になるでしょう。 プログラムは BoringSSL を使用する際に独自のコピーを同梱し、API を変更する 判断をしたときには、必要に応じてすべてを更新します。これにより、互換性という...

Astra Linux – Vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-17679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...

SUSE CVE-2019-13660

UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page...

Chrome Blink SpeechRecognitionController Use-After-Free

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the seventeenth entry in that series. Unfortunately I won't be able to publish everything within one month at the current rate, so I may continue to publish these...

Google Chrome / Chromium multiple security vulnerabilities

No description provided...

Google Chrome / Chromium multiple security vulnerabilities

Multiple vulnerabilities on HTML and different formats parsing...

Stored XSS in OnDemand Confluence Header via username

This is from an external report. Creating a user with username: code " code and returning to the dashboard will demonstrate the script injection. This PoC will not work in Chrome/Chromium, but will in Firefox and other browsers that do not have such protective measures...