Ios-Safari-Mallicous-Extension-Example

Ios-Safari-Mallicous-Extension-Example Example on how to injectioncurrently under work of keylogger js through Safari Extensionthat part done...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.114, using "After Free" in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page and user gestures...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 91.0.4472.77, out-of-bounds writes in TabStrip allowed an attacker who convinced a user to install a malicious extension to perform an out-of-bounds memory write via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using TabStrip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

In Google Chrome’s WebUI, use of “After Free” prior to version 91.0.4472.77 allowed attackers to convince users to install a malicious extension, thereby potentially exploiting heap corruption via a specially crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using Tab Strip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using Tab Strip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.101, using “After Free” in Google Chrome extensions allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – vulnerability in Chromium

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 92.0.4515.107, use-after-free vulnerabilities in dialog box handling allowed attackers who convinced users to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

In Google Chrome, a out-of-bounds read in the Tab Strip feature was exploited before version 92.0.4515.131. This allowed an attacker to convince a user to install a malicious extension, enabling them to perform an out-of-bounds memory read through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.131, writing out-of-bounds data using Tab groups in Google Chrome allowed an attacker who convinced a user to install a malicious extension to perform an out-of-bounds memory write via a crafted HTML page...

Astra Linux – vulnerability in Chromium

The incorrect security UI in Extensions in Google Chrome prior to version 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Google Chrome on Linux and ChromeOS before version 92.0.4515.107, an attacker who convinced a user to install a malicious extension could perform an out-of-bounds memory write by using a crafted HTML page. This vulnerability allowed the attacker to execute such an operation...

Astra Linux – vulnerability in Chromium

The “use after free” functionality in Google Chrome’s ServiceWorker was permitted prior to version 149.0.7827.103; this allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape by using a specially crafted Chrome Extension. Chromium securit...

Astra Linux – vulnerability in Chromium

Improper implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to bypass the same-origin policy via a specially crafted Chrome Extension. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 142.0.7444.59, policy bypass in Extensions allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data through a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in Chromoting within Google Chrome on Linux prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a malicious Chrome Extension. Chromium security severity: Mediu...