DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

ChromeKatz

ChromeKatz ChromeKatz es una solución para volcar información sensible desde la memoria de los navegadores basados en Chromium. Por ahora, ChromeKatz consta de tres proyectos: 1. CookieKatz - El volcador de cookies 2. CredentialKatz - Obsoleto.. por ahora 3. ElevationKatz - Obtén la clave de...

SharpChromium

SharpChromium 简介 SharpChromium 是一个 .NET 4.0+ CLR 项目，用于从 Google Chrome、Microsoft Edge 和 Microsoft Edge Beta 中提取数据。目前可提取： Cookie（JSON 格式） 历史记录（附带每条历史记录对应的 Cookie） 已保存的登录信息 注意：所有返回的 Cookie 均为 JSON 格式。如果您安装了 Cookie Editor 扩展，可以直接复制并粘贴到该浏览器扩展的“导入”区域，从而使用提取到的会话。 优势 本次重写相比之前的实现具有以下优势： 无需类型编译或反射 Cookie 以...

chromepass

Chromepass - 破解Chrome保存的密码和Cookie 查看演示 · 报告Bug · 请求功能 目录 关于项目 AV检测 快速开始 先决条件 安装 使用方法 电子邮件 错误、Bug和功能请求 了解更多 许可证 演示 关于项目 Chromepass 是一个基于 Python 的控制台应用程序，可生成一个具有以下功能的 Windows 可执行文件： 解密 Google Chrome、Chromium、Edge、Brave、Opera 和 Vivaldi 保存的密码和 Cookie 远程发送包含登录名/密码组合和 Cookie 的文件（通过 HTTP 服务器或电子邮件）...

EvilSelenium

EvilSelenium EvilSelenium 是一个新项目，旨在武器化 Selenium 以滥用基于 Chromium 的浏览器。当前功能包括： 窃取已保存的凭据（通过自动填充） 窃取 Cookie 对网站进行截图 导出 Gmail/O365 邮件 导出 WhatsApp 消息 下载并外传文件 向 GitHub 添加 SSH 密钥 或者扩展现有功能以满足您的需求（例如，从用户的 GDrive/OneDrive 下载文件）。 注意 1. 运行此工具时，它会终止任何现有的浏览器进程，以便能够使用包含密码和活动会话的用户浏览器配置文件。 2...

Chromium: CVE-2026-11655 Integer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-11634 Use after free in Gamepad

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-9878 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7353 Heap buffer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Researcher claims Claude Desktop installs “spyware” on macOS

Security researcher Alexander Hanff wrote an article titled Anthropic secretly installs spyware when you install Claude Desktop. Claims like that are bound to create two sides, so we searched for an official rebuttal by Anthropic. But we couldn’t find one. It would surprise me very much if they’d...

CVE-2026-22643

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-2801

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher...

October 14, 2025—KB5066835 (OS Builds 26200.6899 and 26100.6899)

None None...

WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now

Cybersecurity startup AISLE discovered a Medium severity flaw in the WebXR component of Chrome, Edge, and other Chromium browsers. Over 4 billion devices were at risk. Update now...

EUVD-2023-39393

Malicious code in bioql PyPI...

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

...

Performance Analysis of Common Browser Extensions for Cryptojacking Detection

This paper considers five extensions for Chromium-based browsers in order to determine how effective can browser-based defenses against cryptojacking available to regular users be. We've examined most popular extensions - MinerBlock, AdGuard AdBlocker, Easy Redirect && Prevent Cryptojacking,...

Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities

Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with...

CVE-2025-34092

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

CVE-2025-34092 Chrome Cookie Key Exposure via AppBound COM Path Validation Weakness

A cookie encryption bypass vulnerability exists in Google Chrome’s AppBound mechanism due to weak path validation logic within the elevation service. When Chrome encrypts a cookie key, it records its own executable path as validation metadata. Later, when decrypting, the elevation service compare...