114676 matches found
chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free
A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...
chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page
A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read memory outside of the browser's security sandbox, leading to information...
chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability could allow a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when ...
chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read
A flaw was found in ANGLE, a component of Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leading to...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...
chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability allows a remote attacker to read memory outside of the browser's security sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page. The primary consequence is the...
Vulnerability_PoC
The PoC/Exploit of some interesting vulnerabilities Author: Vulnerability Research Team of Numen Cyber Labs 1. TCP/IP RCE Vulnerability CVE-2022β34718 PoC Restoration and Analysis...
malicious_extension_sentry
Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software π Live Dashboard Real-time search, filtering by threat category, and source reports, built on...
Needle
Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...
CVE-2021-30632
CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...
CVE-2021-30551
CVE-2021-30551 My exp for chrome V8 CVE-2021-30551 You can found your chrome version by chrome://version or go to http://whatsmyuseragent.org/ You can set up a webserver locally using python like: python3 -m http.server 8080 And the test it by accessing http://127.0.0.1:8080 reference google...
apfell-chrome-extension-c2server
apfell-chrome-extension-c2server Apfell C2 Server for the Google Chrome Extension Payload Find the latest version of the chrome extension C2 server in the Apfell framework here: https://github.com/its-a-feature/Apfell...
ligolo-iwa
Ligolo-IWA A Ligolo-ng JavaScript agent working inside Chrome/Chromium-based browsers by leveraging Isolated Web Applications. See the Ligolo-IWA doc for quick setup: Ligolo-IWA Setup/Quickstart And don't forget to read the Ligolo-ng documentation: π Ligolo-ng Documentation Setup/Quickstart Local...
chrome_v8_cve_checker
How to use Open https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome The page will detect your Chrome version and tell you if youβre vulnerable. If vulnerable, itβll show a link to update Chrome immediately. Why This zero-day lets malicious websites run baaaaaaad code on your machin...
CVE-2026-78938
CVE-2026-78938 β V8 TurboFan CheckMaps instance-migration type confusion Root-cause analysis and exploit for CVE-2026-78938, a type confusion in V8's TurboFan load elimination that was fixed in Chrome 152.0.7977.64 V8 15.2.124.18. The bug was reported as exploited in the wild. The exploit turns t...
debugHunter
debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...
CVE-2021-21220
First install: https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Winx64/848005/ Chrome version: 90.0.4403.0 install chrome-win.zip 1. node server.js run ./chrome.exe --no-sandbox go to localhost:8888 Note that the CVE which this exploits relies on is CVE...
nextjs-react2shell-detect
Chrome extension that runs next.version locally and injects a warning popover if the site runs a next version vulnerable to react2shell This is a Plasmo extension project bootstrapped with plasmo init. Getting Started First, run the development server: bun dev Open your browser and load the...
hyperhives-macos-infostealer-analysis
HyperHives macOS Infostealer β Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...