EUVD-2026-70704

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

CVE-2026-85052

CVE-2026-85052 is an out-of-bounds read in the CrashReporting component of Google Chrome prior to 152.0.7977.82 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory outside the browser's security sandbox, resulting in information dis...

CVE-2026-85046

A type confusion in the V8 JavaScript engine in Google Chrome prior to 152.0.7977.82 allows a remote attacker to execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The vulnerability was reported by Salvatore Gulizia (Serotav) on 2026-08-04 and is ra...

EUVD-2026-70703

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-70702

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85052

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85043

CVE-2026-85043 is an incomplete cleanup vulnerability in the Network component of Google Chrome prior to 152.0.7977.82 . A remote attacker can bypass system access restrictions by sending specially crafted network traffic, potentially leading to unauthorized access to system resources. The Chromi...

google_socks

This script is used to allow two sockets to communicate while relaying data through Google Drive. Check out this blog post for more details. Setup Process Install needed python modules see below Run "python2 ./googlesocks.py --setup" and follow the instructions Create a Google API Project Create...

martian

Martian Proxy Martian Proxy est un proxy HTTP programmable conçu pour être utilisé lors de tests. Martian est un excellent outil à utiliser si vous souhaitez : Vérifier que toutes ou une partie des requêtes sont sécurisées Simuler des services externes au niveau de la couche réseau Injecter des...

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

EUVD-2026-70516

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

CVE-2021-21220

Эксплуатация CVE-2021-21220 От некорректного поведения JIT к удалённому выполнению кода Обзор Этот доклад объясняет эксплуатацию CVE-2021-21220 — уязвимости в движке V8 JavaScript Google Chrome, вызванной некорректными предположениями JIT-компилятора во время оптимизации. В докладе рассматриваетс...

CMS-Made-Simple-2.2.10---SQL-Injection

CMS-Made-Simple-2.2.10---SQL-Injection Google Dorks pour détecter l'injection SQL CMS Made Simple 2.2.10 CVE-2019-9053. Conçu pour l'audit de sécurité et la vérification des correctifs...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | 야생에서 활발히 악용됨 | 렌더러 RCE 샌드박스 내 Google Chrome의 Blink CSS 엔진에서 발견된 use-after-free 취약점으로, 원격 공격자가 조작된 HTML 페이지를 통해 브라우저 샌드박스 내에서 임의 코드를 실행할 수 있습니다. 취약점 세부 정보...

CVE-2026-0628-POC

CVE-2026-0628-POC Концепт-эксплойт PoC для CVE-2026-0628, демонстрирующий внедрение скриптов в привилегированные страницы с помощью тега в Google Chrome. Эта уязвимость, классифицированная как CWE-862 Missing Authorization, позволяет вредоносному расширению обходить политики безопасности в версия...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965는 Google Chrome 브라우저의 V8 JavaScript 엔진에서 발생하는 고위험 취약점입니다. 이 취약점은 V8 엔진이 특정 JavaScript 코드를 처리할 때 구현이 부적절하여 힙 메모리 손상이 발생하는 데서 비롯됩니다. 공격자는 특수하게 제작된 JavaScript가 포함된 악성 웹 페이지에 사용자를 유도하여 이 취약점을 악용하고 Chrome 렌더러에서 임의 코드를 실행할 수 있습니다. 이 취약점을 성공적으로 악용하면 브라우저 충돌, 정보 유출, 심지어 피해자...

log4j-dork-scanner

Log4j dork 스캐너 이것은 Google dorks를 사용하여 Apache Log4j CVE-2021-44228 영향을 받는 파일을 검색, 스크래핑 및 스캔하는 자동 스크립트입니다. 설치: root@kitploit: git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r requirments.txt 스캔: root@kitploit: python scanner.py -d YOURSEARCHDORK -n...