84841 matches found
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control C2, retrieving obfuscated JavaScript from a publicly published Google Sheets document and injecting it into the victim's browser session. The actors use a variation on...
Google-chrome-zero-day
Google Chrome Zero-Day — Web Security Track Learn, practice, and defend — ethically. This repository contains course materials and labs for the Web Security module . Use only in controlled, legal environments VMs, lab networks and follow the Responsible Disclosure & Code of Conduct below. Table o...
BLUE-SPY
BLUE-SPY - Fast Pair Vulnerability Research Tool SECURITY DISCLAIMER AND LEGAL WARNING ⚠️ THIS SOFTWARE IS FOR AUTHORIZED SECURITY RESEARCH AND ETHICAL TESTING ONLY ⚠️ Unauthorized use of this tool against devices you do not own or have explicit written permission to test is ILLEGAL and may result...
CVE-2023-4357-Exploitation
CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...
CVE-2025-14174-Chrome-Zero-Day
Affected Software: Google Chrome prior to version 121.0.6167.85. Vulnerability Type: Use‑after‑free in the V8 JavaScript engine. Description: A use‑after‑free bug in V8’s garbage collection allows crafted JavaScript to corrupt memory, leading to arbitrary code execution within the browser context...
KLA91261 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...
PT-2026-88746
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88754
Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88750
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
poc_monitor
pocmonitor A short scraper looking for a POC of CVE-2024-49112 Setting a cron job to run the script every 4 hours will keep the updates in place. The alerting can be customized but used Discord webhook to alert a Discord channel. 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py...
CVE-2024-5274-Detection
CVE-2024-5274-Detection Guardian Code: A Script to Uncover CVE-2024-5274 Vulnerabilities CVE-2024-5274 Google Chrome Zero-Day Vulnerability Detection and Update Script Overview Google recently patched a fourth zero-day vulnerability in Chrome, known as CVE-2024-5274, which allows attackers to...
CVE-2026-7275-moodle
CVE-2026-7275-moodle PoC & documentation for CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write that can lead to RCE on unpatched Moodle versions. Disclaimer: For authorized security research, auditing, and defensive education only. Do not...
wpair-app
WPair CVE-2025-36911 eg WhisperPair Vulnerability Scanner & Research Tool Features • Installation • Usage • How It Works • Vulnerability • Credits Disclaimer This application is an independent implementation created by @ZalexDev in his own capacity. The original KU Leuven researchers discovered a...
conscryptchecker
conscryptchecker IMPORTANT! add your own app/google-services.json in order to successfully build...
CVE-2026-78325
Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...
CVE-2026-78325
CVE-2026-78325 is a cross-site scripting (XSS) vulnerability in the Evernote and Google Keep note importers of Standard Notes for Android through version 3.201.24 . An attacker can craft a malicious .enex or Google Keep HTML file that, when imported by a victim, executes arbitrary JavaScript in t...
CVE-2026-78325 XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import
Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...
CVE-2026-78325 XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import
Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...
CVE-2026-11645
🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 Zero-Day Memory Corruption Vulnerability 🔥 Actively Exploited Zero-Day ⚡ V8 Engine Memory Corruption 🛡️ Patch Immediately 📖 Overview ⚠️ CVE-2026-11645 is a high-severity zero-day vulnerability affecting the Google Chrome V8 JavaScript engine. The flaw allows...