what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 100

Files

WebKit WebCore::SVGPatternElement::collectPatternAttributes Out-Of-Bounds Read

Posted Nov 22, 2017

Authored by Ivan Fratric, Google Security Research

WebKit suffers from an out-of-bounds read in WebCore::SVGPatternElement::collectPatternAttributes.

tags | exploit

advisories | CVE-2017-13783

SHA-256 | a134d05e2659242ae6b08570b4062d0b03e9ec5b249c75b9adedd8e9d69fdb0a

Download | Favorite | View

Related Files

WebKit CSSCrossfadeValue::crossfadeChanged Use-After-Free

Posted Jan 13, 2023

Authored by Google Security Research, Maddie Stone

WebKit suffers from a RenderMathMLToken use-after-free vulnerability in CSSCrossfadeValue::crossfadeChanged.

tags | exploit

SHA-256 | 2b3fca29e24705325c2e8f69792ec1fc6a23682a01cfd1f0ecc2b118ac3f4ef8

Download | Favorite | View

WebKit HTMLSelectElement Use-After-Free

Posted Nov 4, 2022

Authored by Google Security Research

WebKit suffers from an HTMLSelectElement use-after-free vulnerability.

tags | exploit

SHA-256 | f919800224aa99b055b40b0996b148ca88778d53438f1227fbb9b98b78728a09

Download | Favorite | View

WebKit DOMWindow::open Heap Use-After-Free

Posted Oct 14, 2021

Authored by Google Security Research, Glazvunov

WebKit suffers from a heap use-after-free vulnerability in DOMWindow::open.

tags | exploit

advisories | CVE-2021-30849

SHA-256 | 1ce53d65a9cc597e9e50a3e264ce0d880897dd9133738769858924fe26e913a5

Download | Favorite | View

WebKit EventHandler::keyEvent Heap Use-After-Free

Posted Oct 14, 2021

Authored by Google Security Research, Glazvunov

WebKit suffers from a heap use-after-free vulnerability in EventHandler::keyEvent.

tags | exploit

advisories | CVE-2021-30848

SHA-256 | 7eabdea043659a894f5b12f74294c859932c851d4c626dd836dd8073af4422d8

Download | Favorite | View

WebKit PointerCaptureController::processPendingPointerCapture Heap Use-After-Free

Posted Oct 14, 2021

Authored by Google Security Research, Glazvunov

WebKit suffers from a heap use-after-free vulnerability in PointerCaptureController::processPendingPointerCapture.

tags | exploit

advisories | CVE-2021-30846

SHA-256 | 6ce184daf47d381bec0f093becdd7a23020d24e4485f1163f06267303f984ecc

Download | Favorite | View

WebKit Element::dispatchMouseEvent Heap Use-After-Free

Posted Aug 19, 2021

Authored by Google Security Research, Glazvunov

WebKit suffers from a heap use-after-free vulnerability in Element::dispatchMouseEvent.

tags | exploit

advisories | CVE-2021-30799

SHA-256 | 32ce340e9e7aafa598cb7a3f4f8b409cd814f55d9df9e771b2d4767d0216dbcb

Download | Favorite | View

WebKit WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy Heap Use-After-Free

Posted Aug 19, 2021

Authored by Google Security Research, Glazvunov

WebKit suffers from a heap use-after-free vulnerability in WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy.

tags | exploit

advisories | CVE-2021-30795

SHA-256 | 3bbacfe61c3afe8fcb813221566bd0ea237ec718789ecbd4ffc4394dbe1d0f85

Download | Favorite | View

WebKit NodeRareData::m_connectedFrameCount Integer Overflow / UXSS / Type Confusion

Posted Nov 7, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from an integer overflow in NodeRareData::m_connectedFrameCount that can lead to universal cross site scripting and type confusion.

tags | exploit, overflow, xss

advisories | CVE-2019-8822

SHA-256 | 9569f6db23eb36db6453cff6a1099fc4b733d4c6c9f6c9804237589bef0532d9

Download | Favorite | View

WebKit JSObject::putInlineSlow / JSValue::putToPrimitive Universal XSS

Posted Nov 5, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability in JSObject::putInlineSlow and JSValue::putToPrimitive.

tags | exploit, xss

SHA-256 | 4f0600af672414346b14f07861a388881c06c9b650e59c8f9b6e0c60300565e6

Download | Favorite | View

WebKit HTMLFrameElementBase::isURLAllowed Universal Cross Site Scripting

Posted Oct 28, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from an HTMLFrameElementBase::isURLAllowed universal cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 408eee81bf05626112665dd417b2dde7924a6d1ed0dadfd93c8ea516c4f61b79

Download | Favorite | View

WebKit FrameLoader::clear Same-Origin Policy Bypass

Posted Oct 8, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a same-origin policy bypass vulnerability in FrameLoader::clear.

tags | exploit, bypass

SHA-256 | 334e5b8a59befbfda5f832467d0a3088d6e29ced2e3ce411870872bfc402e694

Download | Favorite | View

WebKit Cached Pages Universal Cross Site Scripting

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability using cached pages.

tags | exploit, xss

SHA-256 | 810dcaa2986bb123c9efd2714f5edbc290f2dfb7d68d466130b7b485e8aa22a1

Download | Favorite | View

WebKit WebCore::ReplacementFragment::ReplacementFragment User-Agent Shadow Root Leak

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a user-agent shadow root leak in WebCore::ReplacementFragment::ReplacementFragment.

tags | exploit, root

SHA-256 | 09a56fe094145d2f756865c520102b2afca903430fbb77803fd80b9dfa8ad54d

Download | Favorite | View

WebKit WebCore::command Universal Cross Site Scripting

Posted Oct 1, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability in WebCore::command.

tags | exploit, xss

SHA-256 | 2ab8baa038de751d4ac569e191ed467bb9bad810a92cddd472ed35c8c2f678aa

Download | Favorite | View

WebKit Universal Cross Site Scripting

Posted Aug 12, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability via XSLT and nested document replacements.

tags | exploit, xss

advisories | CVE-2019-8690

SHA-256 | abc82a98542f87bc9b86b25a54fdb246cadf7b93e9bfa89e200caa30e3415461

Download | Favorite | View

WebKit Synchronous Page Load Universal Cross Site Scripting

Posted Jul 26, 2019

Authored by Google Security Research, Glazvunov

WebKit suffers from a universal cross site scripting vulnerability due to synchronous page loads.

tags | exploit, xss

advisories | CVE-2019-8649

SHA-256 | 96f6f97eb65f02184266b09e95ea13a191470ecb65a4f697ed07cd10157d7b04

Download | Favorite | View

WebKitGTK+ / WPE WebKit Code Execution / Assertion Failures

Posted Oct 1, 2018

Authored by WebKitGTK+ Team

WebKitGTK+ and WPE WebKit suffers from code execution and assertion vulnerabilities.

tags | advisory, vulnerability, code execution

advisories | CVE-2018-4191, CVE-2018-4197, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210, CVE-2018-4212, CVE-2018-4213, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4311, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361

SHA-256 | 074495996da503e304d7d485682ef3659399f18a284e682b03e480a897dd6754

Download | Favorite | View

WebKit WebCore::InlineTextBox::paint Out-Of-Bounds Read

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::InlineTextBox::paint out-of-bounds read vulnerability.

tags | exploit

advisories | CVE-2018-4328

SHA-256 | 994518e9454b66b07b1cd4ca2b9c80bad5057866a1f0bfc7cba8cbaab2478e58

Download | Favorite | View

WebKit WebCore::RenderMultiColumnSet::updateMinimumColumnHeight Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::RenderMultiColumnSet::updateMinimumColumnHeight use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4323

SHA-256 | 289928f02c8cd86108a4f4ba6cf5560fedff675da4f390a55442496ee5478373

Download | Favorite | View

WebKit WebCore::SVGTRefElement::updateReferencedText Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::SVGTRefElement::updateReferencedText use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4315

SHA-256 | 7b9a7b1fa82bf893ede05de1b61f81670d536065bdd12d48311c4d40d6bbd860

Download | Favorite | View

WebKit WebCore::AXObjectCache::handleMenuItemSelected Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::AXObjectCache::handleMenuItemSelected use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4312

SHA-256 | 330899d30af3312c70ec9f154cfff29bf2d70b45f25baf5fd97e1bf90cfa6820

Download | Favorite | View

WebKit WebCore::Node::ensureRareData Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::Node::ensureRareData use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4306

SHA-256 | 9d1cb44aa1da7300c832e19ee82fa5727954a678e6c2fb1ef76cecfab64880e8

Download | Favorite | View

WebKit WebCore::SVGAnimateElementBase::resetAnimatedType Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::SVGAnimateElementBase::resetAnimatedType use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4314

SHA-256 | 3223eccb3079568323f68d5664a9a5ec3e1c8f01f9d6c86877128b0c16b23809

Download | Favorite | View

WebKit WebCore::RenderLayer::updateDescendantDependentFlags Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::RenderLayer::updateDescendantDependentFlags use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4317

SHA-256 | bf315161b9d563fe58bae9997b294ab21d61b4e1889e5fe9e8d860999f22e0c1

Download | Favorite | View

WebKit WebCore::SVGTextLayoutAttributes::context Use-After-Free

Posted Sep 25, 2018

Authored by Ivan Fratric, Google Security Research

WebKit suffers from a WebCore::SVGTextLayoutAttributes::context use-after-free vulnerability.

tags | exploit

advisories | CVE-2018-4318

SHA-256 | 38fca191b8cfb11e205ef0cb59d6b9a5c606a64d85dd1580774a0a103a096acf

Download | Favorite | View