of-CORS

of-CORS of-CORS は、Truffle Security が提供する、タイポスクワッティングを利用してバグバウンティのターゲット内部ネットワーク上のCORS設定ミスを特定・悪用するためのツールスイートです。 詳しくはこちらをご覧ください: https://trufflesecurity.com/blog/of-CORS 仕組み of-CORS は、Django と Django Rest Framework 上に構築された Python3 の Web アプリケーションです。セットアップと設定が完了すると、of-CORS...

ls-poc

CVE-2026-30368 概念验证 !IMPORTANT 此漏洞已被修补，现在需要凭据，请使用变通方案对您自己执行操作。 简介 CVE-2026-30368 允许攻击者通过 Lightspeed Classroom 管理软件中的弱身份验证漏洞控制学生设备。 该 POC（poc.js）在全局上下文中执行 LS Classroom 扩展中的 service worker。该 worker 还会运行 classroom.wasm 以执行某些功能。wasm-loader.js 加载 worker 并提取由 classroom.wasm 生成的 JWT 令牌。提取后，它会终止...

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS 身份验证绕过 一个用 Go 编写的教育性实现，用于演示 CVE-2024-55591 的技术机制，这是一个影响 Fortinet FortiOS 的身份验证绕过漏洞。本仓库严格用于安全研究、防御分析和授权渗透测试。 工作原理 该工具围绕两个主要阶段（目标验证与利用）构建，与漏洞工作流程相对应： 阶段 1：目标验证与检测 1. 管理接口探测： 向 /login?redir=/ng 发送 HTTP/HTTPS GET 请求，并检查响应体中是否存在 FortiOS...

Microsoft Edge (Chromium) < 153.0.4234.32 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.32. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2026 advisory. - Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remot...

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

CVE-2026-82810

extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome contains an information disclosure vulnerability in the Background Service Worker component. The unrestricted chrome.runtime.onMessageExternal.addListener handler allows an attacker with local access and low privileges to manipulate the ...

CVE-2026-82810 extension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosure

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

EUVD-2026-68657

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

Astra Linux – Vulnerability in Chromium

Memory access beyond the allowed boundaries in the Service Worker API in Google Chrome prior to version 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Service Worker API in Google Chrome prior to version 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the Service Worker mechanism in Google Chrome before version 148.0.7778.179 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Thunderbird

When an HTTPS page is embedded in an HTTP page, and a service worker is registered for the former, the service worker could intercept the request for the secure page. This occurs even though the iframe does not belong to a secure context due to the insecure framing. This vulnerability affects...

Astra Linux – Vulnerability in Chromium

Before version 103.0.5060.134, using the "after free" method in the Service Worker API in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Memory access beyond the allowed boundaries in the Service Worker API in Google Chrome prior to version 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

The vulnerability of the Service Worker component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Service Worker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

MAL-2026-10261 Malicious code in abuden219 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de0c667d7c3cbfd4c96728443db8ac059d53487498341bd937cf2aaf738574a The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

MAL-2026-10381 Malicious code in sixseven9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed9c23f2c82d9e91d783110274aff10788de9e0e9a783964702ea26c7b1cc4 The package declares no install/postinstall/preinstall lifecycle scripts, and its declared main is sw.js — a browser ServiceWorker that uses...