CVE-2026-85052

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85043

CVE-2026-85043 is an incomplete cleanup vulnerability in the Network component of Google Chrome prior to 152.0.7977.82 . A remote attacker can bypass system access restrictions by sending specially crafted network traffic, potentially leading to unauthorized access to system resources. The Chromi...

google_socks

This script is used to allow two sockets to communicate while relaying data through Google Drive. Check out this blog post for more details. Setup Process Install needed python modules see below Run "python2 ./googlesocks.py --setup" and follow the instructions Create a Google API Project Create...

martian

Martian Proxy Martian Proxy est un proxy HTTP programmable conçu pour être utilisé lors de tests. Martian est un excellent outil à utiliser si vous souhaitez : Vérifier que toutes ou une partie des requêtes sont sécurisées Simuler des services externes au niveau de la couche réseau Injecter des...

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

EUVD-2026-70516

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...

CVE-2021-21220

Exploitation of CVE-2021-21220 गलत JIT व्यवहार से रिमोट कोड निष्पादन तक अवलोकन यह प्रस्तुति CVE-2021-21220 के शोषण की व्याख्या करती है, जो Google Chrome के V8 JavaScript इंजन में एक भेद्यता है, जो अनुकूलन के दौरान गलत JIT कंपाइलर धारणाओं के कारण उत्पन्न हुई है। प्रस्तुति निम्नलिखित बिंदुओं से...

CMS-Made-Simple-2.2.10---SQL-Injection

CMS-Made-Simple-2.2.10 - حقن SQL ثغرات Google Dorks لاكتشاف حقن SQL في CMS Made Simple الإصدار 2.2.10 فما دون CVE-2019-9053. تم بناؤه لأغراض التدقيق الأمني والتحقق من التصحيحات...

CVE-2026-2441-PoC

CVE-2026-2441 — ثغرة Use-After-Free في Chrome CSSFontFeatureValuesMap CVSS 8.8 عالية | استغلال نشط في البرية | تنفيذ كود عن بُعد في Renderer معزول ثغرة use-after-free في محرك CSS الخاص بـ Blink في متصفح Google Chrome تسمح لمهاجم عن بُعد بتنفيذ كود تعسفي داخل صندوق حماية المتصفح عبر صفحة HTML مصمم...

CVE-2026-0628-POC

CVE-2026-0628-POC Prueba de concepto PoC para CVE-2026-0628, que demuestra la inyección de scripts en páginas privilegiadas mediante el uso de la etiqueta en Google Chrome. Esta vulnerabilidad, clasificada como CWE-862 Missing Authorization, permite a una extensión maliciosa eludir políticas de...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965 هو ثغرة أمنية عالية الخطورة في محرك V8 JavaScript داخل متصفح Google Chrome. تنبع هذه الثغرة من تنفيذ غير صحيح في محرك V8 عند معالجة كود JavaScript معين، مما يؤدي إلى تلف في ذاكرة الكومة heap memory. يمكن للمهاجم استغلال هذه الثغرة عن طريق إغراء المستخدم بزيارة صفحة...

log4j-dork-scanner

ماسح دُورك Log4j هذا سكربت تلقائي للبحث والتجميع والفحص عن الملفات المتأثرة بثغرة Apache Log4j CVE-2021-44228 باستخدام Google dorks. التثبيت: root@kitploit: git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r requirments.txt الفحص: root@kitploit: pytho...

CVE-2026-2441-PoC

CVE-2026-2441 — ثغرة Use-After-Free في Chrome CSSFontFeatureValuesMap CVSS 8.8 عالية | استغلال نشط في البرية | تنفيذ كود عن بُعد في Renderer معزول ثغرة use-after-free في محرك CSS الخاص بـ Blink في متصفح Google Chrome تسمح لمهاجم عن بُعد بتنفيذ كود تعسفي داخل صندوق حماية المتصفح عبر صفحة HTML مُعد...

CVE-2026-5281-Research-Toolkit

مجموعة أدوات البحث CVE-2026-5281 استخدام بعد التحرير في Chrome WebGPU CWE-416 هذه المجموعة مخصصة للبحث الأمني والتحقق الدفاعي حول CVE-2026-5281. إصدار Chrome المُصحَّح: 146.0.7680.178 الإصدارات المعرضة للخطر المحتملة: أي إصدار أقل من 146.0.7680.178 الملفات cve20265281scanner.py ماسح موحّد لفحوصات...

Linux Distros Unpatched Vulnerability : CVE-2026-84359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi...

PT-2026-85238

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A use after free issue in Skia allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memo...

Linux Distros Unpatched Vulnerability : CVE-2026-84355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web...

Linux Distros Unpatched Vulnerability : CVE-2026-84324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network...

Linux Distros Unpatched Vulnerability : CVE-2026-84334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandb...

Google Chrome < 152.0.7977.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop01882797386 advisory. - Use after free in Skia. CVE-2026-85049 - Improper input validatio...