DRUPAL-CONTRIB-2026-153

The Ultimate Table Field module enables you to store table data in a field and edit each table cell through a dialog, using cell field plugins such as text, link, and file. The module doesn't sufficiently protect the route that opens the cell editor dialog. The route is accessible to anonymous...

SyncShield

🔐 SyncShield — CVE-2018-5764 検出のためのブラウザ拡張機能 危険な Rsync コマンドが悪用される前に検出します 最終年度プロジェクト NWS/129/23B の一環として開発された、軽量でプライバシーに配慮したブラウザ拡張機能。Rsync コマンドに欠落している --protect-args フラグを検出し、CVE-2018-5764 によるリモートコマンド実行を防止します。 ✅ 完全オフラインで動作 ✅ サーバー接続やデータ収集は一切なし ✅ リアルタイムスキャンとアラート ✅ 教育・緩和策に重点 ✅ 学生、システム管理者、セキュリティ愛好家向け 👥...

CVE-2026-22016-IPFS-CID-Spoofing-via-Multihash-Length-Extension

CVE-2026-22016 – Suplantación de CID en IPFS mediante extensión de la longitud del multihash Código del programa Python root@kitploit: ipfscidspoof.py - Generates a CID with a different multihash length import multihash, cid Attacker creates a file whose hash, when truncated, matches a different...

CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

このリポジトリには README がありません。...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - 修正版 Grafana RCE エクスプロイト これは、CVE-2024-9264 （Grafanaにおける重大なリモートコード実行脆弱性、SQL式とDuckDB経由）の概念実証エクスプロイトの修正版 です。 🔗 元のアドバイザリ: Grafana Security Release ❌ 元のPoC: 構文エラーと writefile の誤った使用により破損 ✅ このバージョンは動作します。脆弱なGrafana 11.0.0インスタンスでテスト済みです。 ✅ このバージョンの修正点 ✅ 正しく writefile を使用（writefile...

react2shell-burp

Escáner y validador de RCE React2Shell CVE-2025-55182 Creador: j0lt Colaborador: https://github.com/shashank18 Una extensión de Burp Suite que detecta y valida la vulnerabilidad React2Shell CVE-2025-55182 — un fallo de ejecución remota de código sin autenticación previa en React Server Components...

CVE-2026-83541

The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

EUVD-2026-74713

The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

osquery_cve-2024-23443

概念実証（POC） CVE-2024-23443 hpbiososquery HP BIOS WMI の osquery 拡張機能を Elastic Agent に追加します 依存関係 pip install pywin32 pip install osquery pip install pyinstaller ビルド root@kitploit: pyinstaller --onefile hpbiosenumeration.py インストール 1. 拡張機能を Elastic Agent の場所にコピーします copy .\hpbiosenumeration.exe...

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

CVE-2026-87431

A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...

CVE-2026-87450

A flaw was found in Google Chrome. This incorrect authorization vulnerability in Permissions allows a remote attacker, by leveraging social engineering and a crafted Chrome extension, to obtain sensitive information. This could lead to the unauthorized disclosure of user data...

CVE-2026-87625

A flaw was found in Chromium V8. This use-after-free vulnerability allows a remote attacker, through social engineering, to execute arbitrary code within the sandbox environment. The exploitation occurs when a user is tricked into installing a specially crafted Chrome extension...

CVE-2026-87446

A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...

CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

CVE-2026-87561

A flaw was found in chromium-browser. A remote attacker could exploit incorrect authorization in Web Authentication by using a specially crafted Chrome extension. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized access or information disclosure...

CVE-2026-87511

A flaw was found in DevTools in Google Chrome. Missing authorization in this component allows a remote attacker to obtain sensitive cross-origin data. This can be achieved by exploiting the vulnerability with a specially crafted Chrome extension...

CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

AZL-100005 CVE-2026-87625 affecting package nodejs 24.20.0-1

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...