CVE-2026-121090

An improper privilege management flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936993 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending...

HexRaysCodeXplorer

| | | | | \ / \ | | \ \ / / | | | || | | |/ / | / / | | \ V / | | | |/ \ / / // | | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ \ /\ | | | / /^\ \ | | | | | | / | | |///\| \,|, |/// ,|\/ / ./||/|| || / | | | |/ ||...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

reverse-skill

reverse-skill Cybersecurity Skills Router · 逆向技能路由包 Navigate the dark waters, sail against the stream. About · Getting Started · Usage · Routing · AI Bootstrap · Contributing 🌐 中文 About If you are an AI Agent, jump toREADMEAI.md and follow the instructions strictly. When an AI agent Claude Code,...

CVE-2026-121241

Use after free in Navigation in Google Chrome on on Android prior to 1...

CVE-2026-121090

Improper privilege management in Navigation in Google Chrome on on iOS...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

findyara-ida

FindYara Use this IDA python plugin to scan your binary with yara rules. All the yara rule matches will be listed with their offset so you can quickly jump to them! 🍻 All credit for this plugin and the code goes to David Berard @p0ly 🍻 This plugin is copied from David's excellent findcrypt-yara...

RedGridLink

Red Grid Link Red Grid Link is retired Retired September 27, 2026. v1.7.0 is the final release. Link has been removed from sale on the App Store and unpublished on Google Play. New subscriptions and lifetime purchases are no longer offered. Existing installations: Retirement does not erase local...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

CVE-2026-121241

An use after free flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574791491...

CVE-2026-111754

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, ServerPlatformLocation in Angular server-side rendering checks for protocol-relative URLs before WHATWG URL normalization. A...

EUVD-2026-116418

Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116392

Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121090

Google Chrome on iOS is vulnerable to an improper privilege management flaw in the Navigation component. This vulnerability (CVE-2026-121090) affects versions prior to 157.0.8103.38 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially exe...

CVE-2026-121090

Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121090: Google Chrome: Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker…

Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-49906

An unprivileged application can bypass the android.car.permission.CARDISPLAYINCLUSTER permission by registering an activity with the android.car.cluster.NAVIGATION category and requesting navigation app focus. The privileged ClusterHomeSample application, acting as a confused deputy, resolves and...

CVE-2026-118008

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a...

firefox: thunderbird: Sandbox escape in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...