browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

CVE-2026-111737

The Speed Optimizer WordPress plugin in versions before 7.8.5 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise or escape specific settings before they are outputted in the head section of front-end pages. This flaw allows high-privile...

CVE-2026-111737 Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists

The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: State: fixed an out-of-bounds read during lookup. Lookup and resizing can operate in parallel. The xfrmstatehashgenerationseqlock ensures a retry mechanism; however, the hash functions may encounter a hmask value that is to...

browsertunnel

browsertunnel Browsertunnel es una herramienta para exfiltrar datos del navegador utilizando el protocolo DNS. Lo logra abusando de dns-prefetch, una función diseñada para reducir la latencia percibida de los sitios web realizando consultas DNS en segundo plano para dominios específicos. El tráfi...

prefetch-hash-cracker

Cracker de Hash de Prefetch Motivación Durante el análisis forense de una máquina Windows, es posible que encuentres el nombre de un archivo prefetch eliminado. Aunque su contenido puede no ser recuperable, el nombre del archivo en sí suele ser suficiente para encontrar la ruta completa del...

prefetch-tool

Strumento Prefetch KASLR per Windows Uno strumento proof-of-concept per bypassare KASLR ASLR del kernel su Windows 11. Ispirato da EntryBleed per Linux. Questo strumento è stato sviluppato come parte di un exploit che ha come target Windows 11 24H2. Non sono affatto un esperto di canali laterali,...

SUSE CVE-2026-77797

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797 Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797 Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797

The Velociraptor prefetch library contains an out of bounds vulnerability. This flaw may cause a crash when the library parses specific malformed prefetch files . No specific affected versions, exploit details, or remediation steps are provided in the documents.

EUVD-2026-85881

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797 Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

PT-2026-97795

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The prefetch library contains an out-of-bounds issue that can lead to a system crash when the software parses specifically crafted malformed prefetch files. Recommendations At the moment...

CVE-2026-77797: Improper Input Validation

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

NPM: 9router: Image prefetch DNS rebinding allows SSRF to internal services

NPM: 9router: Image prefetch DNS rebinding allows SSRF to internal services vulnerability discovered by ? in WordPress Npm 9router versions = 0.4.80...