Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol CDP inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions. The technique assumes th...

If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

This essay was written with Nathan E. Sanders, and originally appeared inThe Guardian. OpenAI, and then Anthropic, were each formed by AI developers who feared unrestrained corporate AI development--specifically, that companies like Google and Meta would steer the technology towards deleterious,...

EUVD-2026-58616

A vulnerability was determined in Tenda AC12 15.03.06.23multiTD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack ma...

CVE-2026-19821

CVE-2026-19821 affects Tenda AC12 devices (15.03.06.23_multi_TD01) via httpd web management interface. The vulnerability targets function formSetRebootTimer in /goform/SetSysAutoRebbotCfg, where manipulating the rebootTime argument leads to a buffer overflow. The issue can be triggered remotely, ...

CVE-2026-19821

A vulnerability was determined in Tenda AC12 15.03.06.23multiTD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack ma...

CVE-2026-19821 Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow

A vulnerability was determined in Tenda AC12 15.03.06.23multiTD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack ma...

-buffer-overflow-exploitation

Buffer Overflow Exploitation Student: Sampson Edward Stob...

cve-analysis-lab

Vulnerability Research & CVE Analysis Lab Analyst: Harsha...

CVE-2026-19815

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible...

CVE-2026-19814

A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing a manipulation of the argument macAddress results in stack-based buffer overflow. It is possible to initiate the attac...

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Introduction CoolClient is a backdoor family attributed to the HoneyMyte APT group also known as Mustang Panda that has been used in their cyber-espionage campaigns targeting organizations across Asia and Russia. It supports such capabilities as keylogging, clipboard theft, credential harvesting,...

EUVD-2026-58613

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible...

CVE-2026-19815 TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible...

CVE-2026-19815

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible...

CVE-2026-19815 TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible...

CVE-2026-19815

TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) is affected by a stack-based buffer overflow in the firewall.so component, via the setParentalRules function in /cgi-bin/cstecgi.cgi. Manipulating the urlKeyword argument can be exploited remotely; exploits have been published. CVSS metrics indicat...

CVE-2026-65975

A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: vgpu-util, coredns-fips, verticadb-operator, opentelemetry-operator, blobfuse2, gitaly, datadog-agent-fips, grafana-operator, kubernetes-csi-node-driver-registrar-fips, rancher, crossplane-function-environment-configs-fips, pvc-autoresizer, cilium-fips, dapr, istio,...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: vgpu-util, coredns-fips, verticadb-operator, opentelemetry-operator, blobfuse2, gitaly, datadog-agent-fips, grafana-operator, kubernetes-csi-node-driver-registrar-fips, rancher, crossplane-function-environment-configs-fips, pvc-autoresizer, cilium-fips, dapr, istio,...

GO-2025-4015 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, rekor, gops-fips, kubernetes-replicator, rancher-helm, sriov-network-device-plugin-fips, terraform-provider-tls, kubernetes-dashboard-web-fips, cloudprober-fips, rancher-telemetry, terraform-provider-time, flyte, incert, prometheus-adapter-fips,...