Chrome Extensions: Are you getting more than you bargained for?
Essential information
- Published
- 26/01/2026 15:40
- Modified
- 26/01/2026 18:03
- Tags
- 2026-01-26 CVE-2020-28707 chrome extensions clipboard access data exfiltration malicious extensions remote code execution search hijacking security risks xss vulnerability
- Related entities
- 18 vulnerabilities (cve), 13 observables, 7 techniques (mitre), 5 others
Description
Related entities
Vulnerabilities, IOCs, intrusion sets, MITRE techniques and other entities referenced in this report.
Vulnerabilities (CVE) (18)
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in …
- Attack vector
- Network
- Published
- 09/09/2024
- Modified
- 21/12/2025
Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.
- Attack vector
- Network
- Published
- 30/09/2022
- Modified
- 20/12/2025
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on …
- Published
- 15/02/2024
- Modified
- 21/12/2025
Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. …
- Attack vector
- Network
- Published
- 02/06/2023
- Modified
- 21/12/2025
Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
- Attack vector
- Local
- Published
- 08/04/2025
- Modified
- 21/12/2025
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary …
- Attack vector
- Network
- Published
- 13/02/2025
- Modified
- 21/12/2025
Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a …
- Attack vector
- Local
- Published
- 03/11/2021
- Modified
- 27/05/2026
Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 …
- Attack vector
- Adjacent
- Published
- 30/09/2022
- Modified
- 20/12/2025
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware …
- Attack vector
- Network
- Published
- 20/07/2025
- Modified
- 21/12/2025
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. …
- Attack vector
- Network
- Published
- 06/10/2025
- Modified
- 21/12/2025
Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.
- Attack vector
- Network
- Published
- 19/07/2023
- Modified
- 27/05/2026
Observables (13)
-
47.109.200.130 -
77.221.149.107 -
http://api.office123456.com/vcx/ -
http://www.dpswebsafe.com/rd/ -
http://codon.vn/ext/xmshield.json -
http://k8n1z40.live/k8n1z40.json -
http://trk.entiretrack.com/trackerwcfsrv/tracker.svc/trackUpdate/?q= -
http://searchingpart.com -
http://trk.entiretrack.com/ -
https://codon.vn/ext/xmshield.json -
www.dpswebsafe.com -
http://www.dpswebsafe.com/rd/?q=
Techniques (MITRE) (7)
Others (5)
-
trk.entiretrack.com
-
k8n1z40.live
-
api.office123456.com
-
searchingpart.com
-
codon.vn