KLA91286 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WebGL can be exploited...

CVE-2025-36911-exploit

WhisperPair CLI de Python Herramienta de explotación rápida para CVE-2025-36911 en Python para probar nuestro equipo Autor: Sébastien Dudek @FlUxIuS @ Penthertz Créditos: whisperpair.eu por el descubrimiento y esta bonita APK de @ZalexDev que acortó el tiempo de implementación wpair-app ⚠️ Aviso...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock Sabrina Root exploit for Chromecast with Google T...

poc_monitor

pocmonitor Un pequeño scraper que busca un PoC de CVE-2024-49112 Configurar un cron job para ejecutar el script cada 4 horas mantendrá las actualizaciones al día. La alerta se puede personalizar, pero se usó un webhook de Discord para alertar a un canal de Discord. 0 /4 cd /root/monitorscript &&...

CVE-2024-5274-Detection

CVE-2024-5274-Detection Guardian Code: CVE-2024-5274 の脆弱性を発見するスクリプト CVE-2024-5274 Google Chrome ゼロデイ脆弱性検出・更新スクリプト 概要 Google は最近、Chrome における 4 つ目のゼロデイ脆弱性 CVE-2024-5274 を修正しました。この脆弱性により、攻撃者は悪意のあるコードを実行できる可能性があります。この脆弱性は Windows、macOS、Linux 上の Chrome...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC 与文档 for CVE-2026-7275 : Moodle Google Drive 存储库 repositorygoogledocs — 路径遍历 / 任意文件写入 ，可导致未打补丁的 Moodle 版本 RCE 。 免责声明: 仅用于授权的安全研究、审计和防御教育。请勿在未经书面许可的系统上使用。 元数据 字段| 值 ---|--- CVE| CVE-2026-7275 公告| MSA-26-0006 追踪器| MDL-88423 组件| repositorygoogledocs CWE| CWE-22（路径遍历） 严重性| 严重...

conscryptchecker

conscryptchecker 重要提示！请添加您自己的 app/google-services.json 文件，以便成功构建。...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape through a crafted Chrome Extension...

Astra Linux – Vulnerability in Chromium

Before version 95.0.4638.54, using Free after PDF accessibility in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of “after free” in digital credentials in Google Chrome before version 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 89.0.4389.90, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to version 92.0.4515.107 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Potential users of the Speech Recognizer feature in Google Chrome on Android before version 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.101, using BFCache in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after-free in Skia in Google Chrome before version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Chromium security severity: High...