CVE-2025-51726

根据要求，我现在通过实际利用场景和PoC证据演示了这两个漏洞（BA2022和BA2015），展示了攻击者如何在真实环境中滥用这些问题。 📌 1. BA2022 代码签名中的弱哈希 – SHA-1 利用演示 虽然原始的 CyberGhostVPNSetup.exe 看起来已签名且受信任，但我已成功使用自签名证书和 SHA-1 哈希创建了一个伪造的安装程序（fakeCyberGhost.exe）。 ✅ 技术证明： 使用 OpenSSL 生成伪造的 CA 和 SHA-1 证书 使用 signtool.exe 用该证书签署伪造的二进制文件 Windows 仍将其标记为“已签名”（参见...

Google Chrome 78.0.3904.70 - Remote Code Execution Exploit

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Google Chrome 78.0.3904.70 Remote Code Execution

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Date: 2022-05-03 Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Google Chrome 78.0.3904.70 - Remote Code Execution

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Date: 2022-05-03 Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Mozilla Firefox 67 Array.pop JIT Type Confusion

Exploit Title: Mozilla Firefox 67 - Array.pop JIT Type Confusion Date: 2021-12-07 Type: RCE Platform: Windows Exploit Author: deadlock Forrest Orr Author Homepage: https://forrest-orr.net Vendor Homepage: https://www.mozilla.org/en-US/ Software Link:...

Microsoft Adds New Exploit Mitigations to IE 10

Windows 8 is still off on the horizon somewhere, but the new version of Internet Explorer that’s coming with it–IE 10–already is in consumer preview and it includes some major changes to the exploit mitigations. In addition to the existing implementations of ASLR, DEP and others technologies in...