DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

chromepass

Chromepass - Chrome保存パスワードとCookieのハッキング デモを見る · バグを報告 · 機能リクエスト 目次 プロジェクトについて AV検出 はじめに 依存関係と要件 インストール 使い方 メール エラー、バグ、機能リクエスト 詳細情報 ライセンス デモ プロジェクトについて ChromepassはPythonベースのコンソールアプリケーションで、以下の機能を持つWindows実行可能ファイルを生成します。 Google Chrome, Chromium, Edge, Brave, Opera, Vivaldiの保存されたパスワードとCookieを復号化...

EvilSelenium

EvilSelenium EvilSeleniumは、Seleniumを悪用してChromiumベースのブラウザを標的にする新しいプロジェクトです。現在の機能は以下の通りです： 保存された認証情報の窃取（自動入力経由） Cookieの窃取 Webサイトのスクリーンショット取得 Gmail/O365メールのダンプ WhatsAppメッセージのダンプ ファイルのダウンロードと外部流出 GitHubへのSSHキー追加 または、既存の機能を拡張して自分のニーズに合わせることもできます（例：ユーザーのGDrive/OneDriveからファイルをダウンロード）。 注意 1...

SharpChromium

SharpChromium はじめに SharpChromiumは、Google Chrome、Microsoft Edge、Microsoft Edge Betaからデータを取得するための.NET 4.0+ CLRプロジェクトです。現在、以下の情報を抽出できます。 Cookie JSON形式 履歴 各履歴項目に関連するCookie付き 保存されたログイン情報 注意: 返されるすべてのCookieはJSON形式です。Cookie Editor拡張機能がインストールされている場合は、このブラウザアドオンの「インポート」セクションにコピー＆ペーストするだけで、抽出したセッションを利用できます...

ChromeKatz

ChromeKatz ChromeKatz 是一个用于从基于 Chromium 的浏览器内存中转储敏感信息的解决方案。 目前，ChromeKatz 由三个项目组成： 1. CookieKatz - Cookie 转储器 2. CredentialKatz - 已弃用……暂时如此 3. ElevationKatz - 从 elevation 服务获取解密密钥 CookieKatz 提供 exe、Beacon Object File 和 minidump 解析器。对于 ElevationKatz，提供可执行文件和 Beacon Object File。 ElevationKatz...

Chromium: CVE-2026-11655 Integer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-11634 Use after free in Gamepad

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-9878 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7353 Heap buffer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Researcher claims Claude Desktop installs “spyware” on macOS

Security researcher Alexander Hanff wrote an article titled Anthropic secretly installs spyware when you install Claude Desktop. Claims like that are bound to create two sides, so we searched for an official rebuttal by Anthropic. But we couldn’t find one. It would surprise me very much if they’d...

CVE-2026-22643

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-2801

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher...

October 14, 2025—KB5066835 (OS Builds 26200.6899 and 26100.6899)

None None...

WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now

Cybersecurity startup AISLE discovered a Medium severity flaw in the WebXR component of Chrome, Edge, and other Chromium browsers. Over 4 billion devices were at risk. Update now...

EUVD-2023-39393

Malicious code in bioql PyPI...

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

...

Performance Analysis of Common Browser Extensions for Cryptojacking Detection

This paper considers five extensions for Chromium-based browsers in order to determine how effective can browser-based defenses against cryptojacking available to regular users be. We've examined most popular extensions - MinerBlock, AdGuard AdBlocker, Easy Redirect && Prevent Cryptojacking,...

Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities

Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with...

CVE-2025-34092

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

CVE-2025-34092 Chrome Cookie Key Exposure via AppBound COM Path Validation Weakness

A cookie encryption bypass vulnerability exists in Google Chrome’s AppBound mechanism due to weak path validation logic within the elevation service. When Chrome encrypts a cookie key, it records its own executable path as validation metadata. Later, when decrypting, the elevation service compare...