Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Description An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox E...

CVE-2024-37383-exploit

Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...

CVE-2024-42009-roundcube-xss

CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC For authorised security testing, CTF environments, and educational research only. Using this tool against systems you do not own or have written permission to test is illegal under the Computer Misuse Act 1990 UK, the CFAA US, and equivalent...

CVE-2026-92037

Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92037

Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92037

Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

Tor-0day-JavaScript-Exploit

CVE-2024-9680 - Tor浏览器 0day漏洞利用 动画时间线中的UAF（释放后使用）— 远程代码执行漏洞 在野攻击中被积极利用，针对Tor浏览器用户 查看分析 • 官方CVE 概述 本仓库包含对CVE-2024-9680的全面分析和教育演示。该漏洞是Firefox动画时间线管理中的一个严重UAF（释放后使用）漏洞，可在浏览器内容进程中实现远程代码执行。 受影响版本 Firefox 131.0.2 Firefox ESR 128.3.1, 115.16.1 Thunderbird 131.0.1, 128.3.1, 115.16.0 补丁状态 补丁已应用：2024年11月5日...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1639

🔓 Exploit Script for CVE-2025-1639 📝 Description The Animation Addons for Elementor Pro plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installelementorpluginhandler function in all versions up to, and including, 1.6. This...

printer-cracktro

printer cracktro My Pwn2Own entries for Pwn2Own Toronto 2022 targeted two different printers. One is Linux based Lexmark and other is DryOS based CANON. After pwning the software on the printer the entries would display a little oldschool crack-intro animation thing to celebrate/illustrate the...

manim-cranim

cranim Manim toolkit for cryptographic scenes. Check out the example gallery: https://nccgroup.github.io/manim-cranim/ Local install: From the repo's root directory, run pip install -e . or pip install . if you don't expect to ever make local changes. This is a Manim plugin. Manim requires plugin...

CVE-2026-86202

PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation events to other clients and waste...

EUVD-2026-74913

PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation events to other clients and waste...

CVE-2026-86202 PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket

PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation events to other clients and waste...

firefox-rce-nssmil

Firefox RCE（CVE-2016-9079）——教育用途 JavaScript 移植版 CVE-2016-9079 公开漏洞利用程序的教育性实现，改编自原始 Exploit-DB/Metasploit 模块，以提供独立使用版本。 免责声明 本仓库严格仅供教育和研究目的使用。其中包含一个公开漏洞利用程序的 JavaScript 移植版本，用于研究历史上的浏览器漏洞利用技术。它不 旨在用于对您不拥有或未经授权测试的系统进行未授权使用。 概述 本仓库包含 CVE-2016-9079 公开漏洞利用程序的独立 JavaScript 实现，该漏洞是一个影响旧版 Mozilla Firefox...

firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – Educational JavaScript Port Educational implementation of the public exploit for CVE-2016-9079, adapted from the original Exploit-DB/Metasploit module for standalone use. Disclaimer This repository is provided strictly for educational and research purposes. It contains...

CVE-2026-83544

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed...

CVE-2026-83544 Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed...

CVE-2026-83544

CVE-2026-83544 affects the Greenshift WordPress plugin (versions

EUVD-2026-71859

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed...