what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 75 of 84

Files from Glazvunov

Chrome XRSystem::FocusedFrameChanged and FocusController::NotifyFocusChangedObservers Use-After-Free

Posted Oct 19, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from a use-after-free vulnerability in XRSystem::FocusedFrameChanged and FocusController::NotifyFocusChangedObservers.

tags | exploit

advisories | CVE-2020-6551

SHA-256 | f869e7e675f674a19dd25b7967b0d30bef64c85fd536bf14e5014c96666164b9

Download | Favorite | View

Chrome MediaElementEventListener::UpdateSources Use-After-Free

Posted Oct 14, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from a MediaElementEventListener::UpdateSources use-after-free vulnerability.

tags | exploit

advisories | CVE-2020-6549

SHA-256 | cc438a34bde916b2367808edf5469328250a36522d444efcd405fefbb8549de7

Download | Favorite | View

Chrome NewFixedArray Missing Array Size Check

Posted Aug 25, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from a missing array size check in NewFixedArray.

tags | exploit

SHA-256 | f965bb8845cbd743f6e39b8ef9f5d5bdc466ca80d449a696894d54259e1e0c44

Download | Favorite | View

Chrome Typer::Visitor::TypeInductionVariablePhi Type Inference

Posted May 12, 2020

Authored by Google Security Research, Glazvunov, Tim Willis

Chrome suffers from a Typer::Visitor::TypeInductionVariablePhi type inference issue.

tags | exploit

SHA-256 | 97541b515f1146557567913a8db64be5813d2b15b948ea1105c9e3337c28233a

Download | Favorite | View

Firefox js::ReadableStreamCloseInternal Out-Of-Bounds Access

Posted May 1, 2020

Authored by Google Security Research, Glazvunov

Firefox suffers from an out-of-bounds access vulnerability in js::ReadableStreamCloseInternal.

tags | exploit

advisories | CVE-2020-6806

SHA-256 | 99415c833ecfac641a13e725f04e3b4948804b599bc7caa1dce74f5bc600ed6d

Download | Favorite | View

Chrome ReadableStream::Close Out-Of-Bounds Access

Posted Apr 28, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from an out-of-bounds access vulnerability in ReadableStream::Close.

tags | exploit

advisories | CVE-2020-6390

SHA-256 | 0c4354e2d883e9008f418c20b53a6697d384f98bd55b8f13e5cac05115930417

Download | Favorite | View

WebKit AudioArray::allocate Data Race / Out-Of-Bounds Access

Posted Apr 23, 2020

Authored by Google Security Research, Glazvunov

WebKit has a data race condition in AudioArray::allocate that can lead to out-of-bounds access.

tags | exploit

advisories | CVE-2020-3894

SHA-256 | 36dd2c73b178e99d96c08d9a812df124956a7cdf27caa906595ed62ecb80f1e9

Download | Favorite | View

Chrome AudioArray::Allocate Data Race / Out-Of-Bounds Access

Posted Apr 23, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from an issue where a data race in AudioArray::Allocate can lead to out-of-bounds access.

tags | exploit

advisories | CVE-2020-6388

SHA-256 | 40c89fb5d3f2f33337160274195305f3cd381ef1ff99e9b1b31576dd9241fd40

Download | Favorite | View

Chrome BlobURLStoreImpl::Register Site Isolation Bypass

Posted Mar 12, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from a site isolation bypass in BlobURLStoreImpl::Register.

tags | exploit

SHA-256 | 83742192bfebec5fac11ec3839dfe22f0b0f8001efd65e7bb7eb1d0f27c376e7

Download | Favorite | View

Chrome DesktopMediaPickerController::WebContentsDestroyed Use-After-Free

Posted Feb 27, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in DesktopMediaPickerController::WebContentsDestroyed.

tags | exploit

advisories | CVE-2019-13767

SHA-256 | 412f788875a5daf71252244d087b880c4599e16c220ff869fdb9818a05b134b4

Download | Favorite | View

Google Chrome PasswordFormManager::OnGeneratedPasswordAccepted Heap Buffer Overflow

Posted Feb 11, 2020

Authored by Google Security Research, Glazvunov

Google Chrome suffers from a heap buffer overflow in PasswordFormManager::OnGeneratedPasswordAccepted.

tags | exploit, overflow

SHA-256 | f5139e268214cd751e4b2cf1b926e0dd357c22780a625c86477985f58e8f9907

Download | Favorite | View

Google Chrome PannerHandler::TailTime Heap Use-After-Free

Posted Feb 11, 2020

Authored by Google Security Research, Glazvunov

Google Chrome suffers from a heap use-after-free vulnerability in PannerHandler::TailTime.

tags | exploit

SHA-256 | 4976b111be33279e517731b1c015b3f56800e2b74a649f459bafdae592200209

Download | Favorite | View

Chrome Site Isolation Bypass / File Disclosure

Posted Nov 8, 2019

Authored by Google Security Research, Glazvunov

The Chrome Payment Handler API suffers from site isolation bypass and local file disclosure vulnerabilities.

tags | exploit, local, vulnerability

SHA-256 | 5422de00f3ad840d3ddaf47ca01135dd9a83ecda77339b7267b4ed4026c4879c

Download | Favorite | View

WebKit NodeRareData::m_connectedFrameCount Integer Overflow / UXSS / Type Confusion

Posted Nov 7, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from an integer overflow in NodeRareData::m_connectedFrameCount that can lead to universal cross site scripting and type confusion.

tags | exploit, overflow, xss

advisories | CVE-2019-8822

SHA-256 | 9569f6db23eb36db6453cff6a1099fc4b733d4c6c9f6c9804237589bef0532d9

Download | Favorite | View

WebKit JSObject::putInlineSlow / JSValue::putToPrimitive Universal XSS

Posted Nov 5, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability in JSObject::putInlineSlow and JSValue::putToPrimitive.

tags | exploit, xss

SHA-256 | 4f0600af672414346b14f07861a388881c06c9b650e59c8f9b6e0c60300565e6

Download | Favorite | View

WebKit HTMLFrameElementBase::isURLAllowed Universal Cross Site Scripting

Posted Oct 28, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from an HTMLFrameElementBase::isURLAllowed universal cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 408eee81bf05626112665dd417b2dde7924a6d1ed0dadfd93c8ea516c4f61b79

Download | Favorite | View

WebKit FrameLoader::clear Same-Origin Policy Bypass

Posted Oct 8, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a same-origin policy bypass vulnerability in FrameLoader::clear.

tags | exploit, bypass

SHA-256 | 334e5b8a59befbfda5f832467d0a3088d6e29ced2e3ce411870872bfc402e694

Download | Favorite | View

WebKit Cached Pages Universal Cross Site Scripting

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability using cached pages.

tags | exploit, xss

SHA-256 | 810dcaa2986bb123c9efd2714f5edbc290f2dfb7d68d466130b7b485e8aa22a1

Download | Favorite | View

WebKit WebCore::ReplacementFragment::ReplacementFragment User-Agent Shadow Root Leak

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a user-agent shadow root leak in WebCore::ReplacementFragment::ReplacementFragment.

tags | exploit, root

SHA-256 | 09a56fe094145d2f756865c520102b2afca903430fbb77803fd80b9dfa8ad54d

Download | Favorite | View

WebKit WebCore::command Universal Cross Site Scripting

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability in WebCore::command.

tags | exploit, xss

SHA-256 | 2ab8baa038de751d4ac569e191ed467bb9bad810a92cddd472ed35c8c2f678aa

Download | Favorite | View

WebKit URI / Synchronous Page Loads Universal Cross Site Scripting

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit has an issue where URI and synchronous page loads are susceptible to a universal cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 75fd846052c0fb1009700c5d9f09694f68aba4180607e47c323de0c95599ba7c

Download | Favorite | View

WebKit Universal Cross Site Scripting

Posted Aug 12, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability via XSLT and nested document replacements.

tags | exploit, xss

advisories | CVE-2019-8690

SHA-256 | abc82a98542f87bc9b86b25a54fdb246cadf7b93e9bfa89e200caa30e3415461

Download | Favorite | View

Chrome blink::PresentationAvailabilityState::UpdateAvailability Heap Use-After-Free

Posted Aug 6, 2019

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free condition in blink::PresentationAvailabilityState::UpdateAvailability.

tags | exploit

SHA-256 | 23c003926c5c85cdcdf771092ba8c81c3f494485b3ff22565d8e9b7a04d1d2d5

Download | Favorite | View

WebKit Synchronous Page Load Universal Cross Site Scripting

Posted Jul 26, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability due to synchronous page loads.

tags | exploit, xss

advisories | CVE-2019-8649

SHA-256 | 96f6f97eb65f02184266b09e95ea13a191470ecb65a4f697ed07cd10157d7b04

Download | Favorite | View

Microsoft Windows HTTP To SMB NTLM Reflection Privilege Escalation

Posted Jul 15, 2019

Authored by Google Security Research, Glazvunov

Microsoft Windows suffers from an HTTP to SMB NTLM reflection that leads to a privilege escalation.

tags | exploit, web

systems | windows

advisories | CVE-2019-1019

SHA-256 | 9c438d49a171f163f1fef4b8312a6ae876fbc9dbe34a835fb20edf950b89e9d0

Download | Favorite | View