12292 matches found
ofensive-playbook
HackTheBox — Writeups Collection A collection of HackTheBox m...
Fedora 42 : cef (2026-e0c31e9e7e)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e0c31e9e7e advisory. Update to 146.0.7680.177 + cef-146.0.11+g8e1262b High CVE-2026-5273: Use after free in CSS High CVE-2026-5272: Heap buffer overflow in GPU High...
CVE-2026-6364
Google Chrome is affected by an out-of-bounds read vulnerability within the Skia graphics library. This flaw allows a remote attacker to obtain potentially sensitive information from process memory by providing a crafted file . The vulnerability impacts versions of Chrome prior to 147.0.7727.101 ...
CVE-2026-6363
Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
PT-2026-46711
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient policy enforcement in Actor allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update to version 149.0.7827.53 or late...
PT-2026-46707
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in SVG allows a remote attacker to leak cross-origin data, which is information from a different origin than the one that initiated the request, by using...
PT-2026-46701
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in Site Isolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site Isolation...
mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_vformat
Detailed Report: https://oss-fuzz.com/testcase?key=5605604055121920 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x747fd4ee5ccd Crash State: mrbvformat errorva mrbraisef Sanitizer: addres...
PT-2026-33164
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description An out of bounds read in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted file. An out of bounds read occurs when a...
PT-2026-46695
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in Extensions allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory by using ...
Eaton End-of-Life Devices Detection
The current plugin identifies Eaton devices that are end-of-life, i.e., still supported but have a discontinued date announced. Eaton Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last ti...
PT-2026-54174
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Chromecast component allows a remote attacker to perform privilege escalation by using a crafted HTML page. Recommendations Update Google Chrome t...
libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamut
Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5433768319188992 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzerasani386libultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...
libxml2:regexp: Heap-buffer-overflow in xmlFAParsePosCharGroup
Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4963740721414144 Project: libxml2 Fuzzing Engine: afl Fuzz Target: regexp Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x76f79f1e0d54 Crash...
PT-2026-46677
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in XML allows a remote attacker to inject arbitrary scripts or HTML, leading to Universal Cross-Site Scripting UXSS, which is a vulnerability that allows...
PT-2026-46651
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An integer overflow in Skia allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. Heap corruption occurs when a program writes data outside the...
SUSE CVE-2026-5883
Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::MeshSerializerImpl_v1_8::isLodMixed
Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5182823379304448 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x76ccce6355c8 Crash State...
EUVD-2026-20679
Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...