cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

cve-2018-12386

Firefox サンドボックス内 RCE エクスプロイト CVE-2018-12386 これは、Niklas Baumstark、Samuel Groß、Bruno Keith によって発見された脆弱性 CVE-2018-12386 のシンプルなエクスプロイトです。 これはほとんどが娯楽目的で作成した PoC であり、サンドボックス回避はなく、エクスプロイトで使用されるオフセットが既知の特定の Linux 環境でのみ動作します（オフセットは exploit/offsets.js で変更できます）。 このエクスプロイトは、Firefox 62.0.3 以前および Firefox ESR...

PT-2026-81522

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in the WebRTC component, which can be triggered by a remote attacker using a specially crafted HTML page. This flaw allows for the execution of arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2018-12386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution...