Curated security research, vulnerabilities, advisories and tools for practitioners.

#browser-extension

Security coverage tagged browser-extension.

1.

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

blog | 2026-08-06 07:47 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #xss

2.

WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow

blog | 2026-01-21 13:56 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #cloud-security

3.

XSSpect: A browser extension to automate XSS injection

blog | 2025-04-09 12:00 | bugcrowd.com | Original ↗ | .md | #pentesting | #automation | #xss

4.

Netlas Chrome and Firefox Extensions

blog | 2025-02-05 00:00 | netlas.io | Original ↗ | .md | #firefox | #chrome | #vulnerability-detection

5.

VS Code Extension Impersonating Zoom Targets Google Chrome Cookies

blog | 2025-01-21 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #malware | #browser-extension

6.

Cyberhaven Extension Compromise: TLS Certificates Reveal Hidden Infrastructure

blog | 2025-01-09 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #browser-extension | #tls-certificates

7.

Decoy Manuals and Malicious Browser Extensions: A Closer Look at a Multi-Layered Threat

blog | 2024-09-10 00:00 | hunt.io | Original ↗ | .md | #malware | #browser-extension | #spyware

8.

Introducing the Wiz extension: cloud security delivered to your AWS console

blog | 2023-11-27 16:17 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws

9.

MetaMask Snaps: playing in the sand

vulnerability | 2023-11-01 00:00 | osec.io | Original ↗ | .md | #vulnerability | #javascript | #browser-extension

10.

SharpTongue Deploys Clever Mail-Stealing Browser Extension “SHARPEXT”

research | 2022-07-28 09:39 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

11.

Showcasing your vulnerability disclosure policy to the world

vulnerability | 2020-01-23 06:31 | yeswehack.com | Original ↗ | .md | #vdp | #vulnerability-disclosure | #best-practices

12.

LastPass Site Password-Stealing Clickjacking Vulnerability

advisory | 2015-07-01 00:00 | bishopfox.com | Original ↗ | .md | #vulnerability | #advisory | #browser-extension