WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — 교차 포트 가로채기를 통한 동일 출처 정책 우회 CVE-2026-20643...

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

whonow

Whonow DNS-сервер Вредоносный DNS-сервер для выполнения атак DNS Rebinding на лету. whonow позволяет динамически задавать DNS-ответы и правила перепривязки с помощью самих запросов к доменам. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested a...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

flash-xdomain-xploit

저자: Gursev Singh Kalra [email protected] Flash와 안전하지 않은 crossdomain.xml을 이용한 Same Origin Policy 우회 개념 증명PoC ActionScript 코드 컴파일 및 배포 1. Apache Flex SDK를 다운로드하여 설치합니다. 여기에는 ActionScript 컴파일러가 포함되어 있습니다. 2. ActionScript 코드를 로컬 디렉터리에 복사하고 XDomainXploit.as로 이름을 지정합니다. 3. readFrom 및 sendTo 매개변수의 ...

flash-xdomain-xploit

저자: Gursev Singh Kalra [email protected] Flash와 안전하지 않은 crossdomain.xml을 이용한 동일 출처 정책 우회 Proof of Concept ActionScript 코드 컴파일 및 배포 1. Apache Flex SDK를 다운로드하여 설치합니다. 여기에는 ActionScript 컴파일러가 포함되어 있습니다. 2. ActionScript 코드를 로컬 디렉터리에 복사하고 XDomainXploit.as로 이름을 지정합니다. 3. readFrom 및 sendTo 매개변수의 값을...

dref

Фреймворк для эксплуатации DNS Rebinding Этот проект больше не поддерживается. dref берет на себя основную работу по DNS rebinding. Следующий фрагмент из одного из его встроенных полезных нагрузок показывает, как фреймворк используется для сканирования локальной подсети из взломанного браузера;...

CVE-2026-43735

CVE-2026-43735 Утечка информации между источниками в WebKit. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Принцип Когда родительская страница с помощью запускает фрагментарную навигацию в междоменном iframe, переданное в iframe значение NavigateEvent.sourceElement оказывается тем...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE Эта PoC демонстрирует, как злоумышленник может объединить Orange Tsai's CVE-2024-4577 с DNS-ребндингом для достижения удаленного выполнения кода на внутренней сетевой инфраструктуре непосредственно через веб-браузер жертвы. Обходя Same-Origin Policy SOP и эксплуатируя уязвимы...

CVE-2017-17692

CVE-2017-17692 Titolo Exploit: SOP Bypass Data: 06 settembre 2017 Link Software: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en Autore Exploit: Dhiraj Mishra Contatto: http://twitter.com/mishradhiraj Sito Web: http://datarift.blogspot.in/ Categoria: Browser Video...

firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

Astra Linux - Vulnerability in webkit2gtk

This issue was addressed through improved state management. This issue has been fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Processing maliciously crafted web content may bypass the Same-Origin Policy...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox

A malicious extension with the “search” permission could have installed a new search engine, and the favicon of this engine referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing it to bypass the same-origin policy—even though the...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been addressed through improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2, and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may allow bypass of the...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, and watchOS 9.6. A website may be able to bypass the Same Origin Policy...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page...