EUVD-2026-77089

The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment...

chipicopwn

chipicopwn Bootloader exploit for Google Nest Hub 2nd Gen elaine requirements Google Nest Hub 2nd Gen Raspberry Pi Pico Powered USB hub or USB Y cable pico-sdk see Getting Started guide for installation instructions supported version factory firmware 2020/12 - U-Boot 2019.01-gbfc19012ea-dirty Dec...

Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass

Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function in smartgooglecode.php does not check if the...

tink

Tink NOTA : Tink se trasladó a github.com/tink-crypto y este repositorio ya no está activo. Como estaba previsto, hemos dividido Tink en varios repositorios de GitHub alojados en github.com/tink-crypto. Como consecuencia, hemos puesto este repositorio en modo de solo lectura y no se mantendrá en ...

fixing-google-secops-detections

Google SecOps Chronicle Curated Detections: Flaw Analysis & Tuning This repository documents architectural design flaws, logic discrepancies, and tuning strategies for native Google SecOps Chronicle Curated Detections. While Google Threat Intelligence GTIG provides exceptional conceptual threat...

CVE-2026-11645

CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free in Safari Infoleak Exploit - leak an address of a JSObject Tested on webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Original PoC by Google Project Zero:...

CVE-2017-5638

CVE-2017-5638 Google Dork : "site:com filetype:action"...

OSINT_Inception-links

OSINT Inception | Links 🔎 Current working links for Start.me pages that are listed on the OSINT Inception Project Community Help ⛑️ Feel free to submit an Issue or PR Pull Request for any broken links. Even though I regularly check for broken links and I maintain this project. Mentions 🗣️ Thank you...

CVE-2017-0213

CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...

shellshock_crawler

Prerequisite 1. sudo pip install shell 2. install google python search. https://github.com/MarioVilas/google Run I use google to search first 1000 sites and try to get the /etc/passwd After tesing, there are many many many host that can be rooted!!!! By the way, this is only a proto, it has false...

CVE-2014-6271_Test

CVE-2014-6271Test CVE-2014-6271Test 显然，这个项目用于检查启用了cgi的服务器是否受到CVE-2014-6271（即Shellshock）的影响。 依赖项 需要GoogleSearchCrawler。 使用方法 例如： root@kitploit: python exp.py -g www.google.com 这将测试从谷歌搜索结果中收集的URL，关键词来自文件 keywords。 运行 root@kitploit: python exp.py 查看详细信息。...

CVE-2026-0897

CVE-2026-0897 — Google Keras: Denial of Service via HDF5 Shape Bomb in Weight Loading -orange?style=for-the-badge -brightgreen?style=for-the-badge Overview...

cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783: Google Chrome Mojo Sandbox Escape CVSS Score: 8.3 High Discovered by: Kaspersky Status: Actively exploited in the wild espionage campaigns Overview CVE-2025-2783 is a Windows-specific privilege escalation vulnerability in Google Chrome's Mojo Interprocess Communication IPC framewor...

GLSA-202609-02 : Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202609-02 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. Please review the CVE identifier...

CVE-2026-62139

Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...

EUVD-2026-76198

Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...

CVE-2026-62139 WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...

CVE-2026-62139

Site Kit by Google (WordPress plugin, versions

WordPress miniOrange 2FA plugin 18.0-19.2 - Unauthenticated Arbitrary Option Deletion vulnerability

Unauthenticated Arbitrary Option Deletion vulnerability discovered by Osman Hussein in WordPress Plugin miniOrange's Google Authenticator versions 18.0-19.2...