10379 matches found
PT-2026-107074
Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The use of after-free in Extensions in Google Chrome before version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
frontpage-server-extensions-vulnerability-scanner
Frontpage Server Extensions Vulnerability Scanner This Python script automates the process of scanning for the CVE-2000-0114 vulnerability in Microsoft Frontpage Server Extensions. It's designed to help security professionals and system administrators identify potentially vulnerable subdomains...
CVE-2024-38063
CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-go-get-RCE The issue is due to the fact that when installing a package, Golang will build native extensions. This can be used to pass additional flags to the compiler to gain code execution. For example, CFLAGS can be used. You can build it using the following command: $ gcc -shared...
[SECURITY] Fedora 45 Update: caja-extensions-1.28.0-13.fc45
Extensions for the caja file-browser, open-terminal, image-converter, sendto and share...
permhash
Permhash is an extensible framework to hash the declared permissions applied to Chromium-based browser extensions and APKs allowing for clustering, hunting, and pivoting similar to import hashing and rich header hashing. Permhash is currently capable of running on four types of files, but is...
SCAT
SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...
ExtensionHijack
ExtensionHijacker A possible malware persistence method. Hijacking extensions registered for the current user. Read more here proxyapp - a proxy application, used to handle hijacked extensions hijackerapp - installs the proxy application and redirects extension handling to the proxy...
CVE-2026-4813
CVE-2026-4813 CVSS-B 9.4 CRITICAL Authenticated RCE via XSLT injection in Lutece Core Explanations and more on my website /xsl:styleshee...
CVE-2022-28281
CVE-2022-28281: Mozilla Firefox Out of bounds write due to unexpected WebAuthN Extensions This is a bug that can be triggered from a compromised Windows Firefox renderer process. If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent...
CLEANSTART-2024-MR21246 Use after free in extensions in Google Chrome prior to 90
Security vulnerability affects the chromium package. Use after free in extensions in Google Chrome prior to 90...
CLEANSTART-2024-NM78489 Use after free in Extensions in Google Chrome prior to 91
Security vulnerability affects the chromium package. Use after free in Extensions in Google Chrome prior to 91...
CLEANSTART-2024-TO15708 Use after free in Extensions in Google Chrome prior to 91
Security vulnerability affects the chromium package. Use after free in Extensions in Google Chrome prior to 91...
CLEANSTART-2024-KP03061 Use after free in Extensions API in Google Chrome prior to 92
Security vulnerability affects the chromium package. Use after free in Extensions API in Google Chrome prior to 92...
CLEANSTART-2024-ED20723 Chromium: CVE-2021-30610 Use after free in Extensions API
Security vulnerability affects the chromium package. Chromium: CVE-2021-30610 Use after free in Extensions API...
CLEANSTART-2024-YU26542 Inappropriate implementation in Extensions Platform in Google Chrome prior to 98
Security vulnerability affects the chromium package. Inappropriate implementation in Extensions Platform in Google Chrome prior to 98...