CVE-2026-87637

A flaw was found in Chromium, specifically within the Extensions component. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to significant compromise of the...

CVE-2026-87628

A flaw was found in the Cast component of Chromium. An adjacent attacker could exploit a use-after-free vulnerability by sending specially crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading to a complete compromise of the...

CVE-2026-87578

A flaw was found in Google Chrome. This vulnerability, known as a use-after-free, exists in the Receiver component. An adjacent attacker could exploit this by sending specially crafted network traffic, leading to the execution of unauthorized code outside of the browser's security sandbox. This...

CVE-2026-87607

A flaw was found in Google Chrome. This vulnerability, known as a 'use after free' error, occurs when a program attempts to use memory after it has been deallocated. This can allow a remote attacker to potentially execute arbitrary code outside the browser's security sandbox when a user visits a...

CVE-2026-87581

A flaw was found in Google Chrome's Payments component. A remote attacker, leveraging social engineering, could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside the browser's...

CVE-2026-87558

A flaw was found in Google Chrome. This use-after-free vulnerability, specifically within the Payments component, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by tricking a user into visiting a specially crafted HTML page,...

CVE-2026-87528

A flaw was found in Google Chrome. This type confusion vulnerability, specifically in the Rust component, could allow a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page...

CVE-2026-87526

A flaw was found in Chromium. A remote attacker leveraging social engineering could exploit a use-after-free vulnerability in the Passwords component. This could potentially allow the attacker to execute arbitrary code outside the sandbox via user interface interaction...

CVE-2026-87520

A flaw was found in Dawn, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. Exploitation occurs when a user visits a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-87512

A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol 도구 액세스, 에이전트 조정, 구조화된 RPC를 위한 통합 보안 우선 와이어 프로토콜. MCP가 구조적으로 열어 둔 CVE-2025-49596과 도구 중독tool-poisoning 및 샌드박스 탈출 계열 취약점을 해결하기 ...

CVE-2026-87464

A flaw was found in WebGL within Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a critical security compromise...

CVE-2017-5123

CVE-2017-5123 Обзор ошибки Системный вызов Waitid в ядре Linux не проверял целевой адрес, используемый для записи. Это позволяло локальному пользователю с правами на запись в память ядра, что могло привести к повышению привилегий на устройстве или побегу из песочницы. Описание уязвимости...

CVE-2026-84354

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques to trick a user into opening a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security...

CVE-2026-84352

A flaw was found in Google Chrome's WebGL component on Android. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-84324

A flaw was found in Google Chrome's Proxy component. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. By sending specially crafted network traffic, an attacker can exploit this flaw, potentially gaining control over the affected system...

Zapscape

⚡ Zapscape - Your Computer's Safety Net, Simplified ⬇️ DOWNLOAD ZAPSCAPE NOW 🛡️ What Is Zapscape? Zapscape is a friendly tool that helps protect your computer from a hidden threat called a "KVM escape." Think of it as a digital shield that keeps your personal files, photos, and information safe...

vmware-exploitation

VMware 익스플로잇 VMware 이스케이프 익스플로잇과 관련된 링크 모음입니다. Pull Request는 언제나 환영합니다. 업데이트 소식을 받아보시려면 Twitter에서 @andreyknvl을, Mastodon에서 @[email protected]를 팔로우하세요. 연구 2024 "N-day 연쇄 공격으로 모든 것을 장악하기": "파트 4 — VMware Workstation 정보 유출", "파트 5 — VMware Workstation 게스트-투-호스트 이스케이프" 글 "가상화의 균열 밝혀내기, 호스트 시스템...

MAL-015

MAL-015: Ansible Tower의 격리 탈출 2Isolation Escape 2 특정 Rhel 7/8 구성의 Ansible Tower 설치 환경은 공격자가 격리된 환경 외부에서 'awx' 사용자로 권한을 상승시킬 수 있게 하는 '작업 격리Job Isolation' 탈출에 취약할 수 있습니다. CVE-2021-20253이 패치된 후 작업 격리 탈출 취약점을 수행하기 위해 공격자가 악용할 수 있는 파일/구성은 다음과 같습니다: "/var/spool/mail/awx" 파일: 대상에 SMTP 서버가 설치되어 있는 경우 공격자...

onetwoseven-writeup

HTB OneTwoSeven — 전체 워크스루 OneTwoSeven 의 처음부터 끝까지 완전한 워크스루로, HackTheBox의 은퇴한 Linux 머신입니다. 전체 체인: 결정적 자격 증명 생성 → SFTP chroot의 심볼릭 링크 탈출 → vim 스왑 파일 복구 → 방화벽으로 보호된 관리자 패널로 SSH 포트 포워딩 → 주석 처리된 Apache RewriteRules 우회 → RCE → CVE-2024-1086 nftables UAF로 루트 획득. 핵심 포인트: "비활성화"된 플러그인 업로드는 실제로 비활성화되지 않았습니다...