CVE-2026-91734

A flaw was found in Google Chrome. This incorrect authorization vulnerability allows a local attacker to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

gasmask

gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...

CVE-2026-91747

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

CVE-2026-91713

A flaw was found in the Browser component of Google Chrome. A remote attacker, after compromising the renderer process, could exploit missing authorization to spoof user interface UI elements. This could lead to a user being deceived by malicious UI, potentially enabling further attacks...

CVE-2026-91743

A flaw was found in Google Chrome. A race condition in the browser's core component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by tricking a user into visiting ...

CVE-2026-91726

A flaw was found in Google Chrome. An out-of-bounds read vulnerability in WebGL allows a remote attacker to craft a malicious HTML page. This crafted page can then be used to read memory outside of the browser's security sandbox, leading to information disclosure...

CVE-2026-91731

A flaw was found in Google Chrome. A type confusion vulnerability in the Compositing component allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized code...

CVE-2026-91711

A flaw was found in Google Chrome. An out-of-bounds write vulnerability in the ServiceWorker component could allow a remote attacker to execute arbitrary code. This exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to arbitrary code execution within the...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

CVE-2021-30573-PoC-Google-Chrome

CVE-2021-30573-PoC-Google-Chrome Google Chrome Use After Free vulnerability reported by S4E Team Total Bug Bounty Reward: $6.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google Blog post:...

GTRS

GTRS - Google Translator Reverse Shell This tools uses Google Translator as a proxy to send arbitrary commands to an infected machine. root@kitploit: INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Environment Configuration First you need a VPS and a domain, for the domain you can get a...

posta

Posta Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. Prerequisites Google Chrome / Chromium Node.js...

tsunami-security-scanner

Tsunami Tsunami es un escáner de seguridad de red de propósito general con un sistema de complementos extensible para detectar vulnerabilidades de alta gravedad con alta confianza. Para obtener más información sobre Tsunami, visita nuestra documentación. Tsunami depende en gran medida de su siste...

Cloudtopolis

Cloudtopolis is a tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended and also, free!. Together with Google Collaboratory, it allows us to break hashes without the need for dedicated hardware from any browser...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...