Lucene search
+L

566 matches found

Kitploit
Kitploit
added 2026/08/27 11:46 a.m.3 views

cve-2019-11707

SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/p/project-zero/issues/detail?id=1820 Screenshots Arquivos exploit.js - Exploit real, precedido pelos util.js & Int64.js do saelo. stager.js - Usado para criar constantes, precedido pelos util.js & Int64.js do saelo...

8.8CVSS7.9AI score0.37696EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/27 8:36 a.m.3 views

CVE-2026-2763-POC

Vulnerabilidade A vulnerabilidade surge da implementação da sintaxe for-in. O escopo de um loop for-in é representado por um par de bytecodes: JSOP::Iter e JSOP::EndIter. root@kitploit: CASEIter MOZASSERTREGS.stackDepth = 1; HandleValue val = REGS.stackHandleAt-1; JSObject iter = ValueToIteratorc...

9.8CVSS8.5AI score0.00469EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 3:26 a.m.2 views

CVE-2024-8381

CVE-2024-8381 एक SpiderMonkey इंटरप्रेटर टाइप कन्फ्यूजन बग। इस रिपॉजिटरी में मार्कडाउन और स्लाइड रूपों में विश्लेषण शामिल हैं, जिसमें मूल कारण, PoC, और एक्सप्लॉइट शामिल हैं। दुर्भाग्य से, इस बग की प्रकृति के कारण, एक्सप्लॉइट केवल तभी लागू होता है जब ASLR अक्षम हो । स्लाइड्स: Slides.pdf विश्लेषण:...

9.8CVSS8.6AI score0.04395EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/08/27 12:21 a.m.2 views

CVE-2024-29943

CVE-2024-29943 Ein Pwn2Own SpiderMonkey JIT Bug: Von Integer-Bereichsinkonsistenz zu Bound Check Elimination und dann RCE. Reproduktion von CVE-2024-29943 für Windows, basierend auf https://github.com/bjrjk/CVE-2024-29943 Änderungen Der ursprüngliche Exploit ist für Linux geschrieben, daher habe...

9.8CVSS7.1AI score0.22935EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/08/27 12:15 a.m.3 views

CVE-2026-8389

CVE-2026-8389 Diese Schwachstelle war für den Einsatz bei Pwn2Own 2026 Berlin vorgesehen, wurde jedoch in Version 150.0.3 gepatcht. Bitfeld-Abkürzung von pcOffset im SpiderMonkey BaselineJIT auf dem Eager-Off-Thread-Baseline-Compile-Pfad, was während der Exception-Unwinding zu einem falschen, abe...

8.8CVSS8.1AI score0.00331EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 11:17 p.m.3 views

CVE-2024-29943

CVE-2024-29943 Un bug JIT di SpiderMonkey scoperto al Pwn2Own: dall'inconsistenza dell'intervallo degli interi all'eliminazione del controllo dei limiti, quindi RCE. Questo repository contiene PoC, Exploit e slide di analisi per CVE-2024-29943. Demo Demo.mp4 Slide Slides.pdf Informazioni per la...

9.8CVSS7.1AI score0.22935EPSS
SaveExploits4References4
Kitploit
Kitploit
added 2026/08/24 5:31 p.m.1 views

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — quem colocou ponteiros no meu wasm Cadeia de exploits de prova de conceito para CVE-2026-15718 , uma má compilação por falta de sync no compilador baseline do WebAssembly do SpiderMonkey da Mozilla componente "JavaScript: WebAssembly". Um único array.fill de zero iterações gera u...

4.3CVSS5AI score0.00489EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/24 5:31 p.m.1 views

CVE-2026-2796-escape-wasm-by-using-wasm

CVE-2026-2796 — SpiderMonkey WebAssembly सैंडबॉक्स एस्केप CVE-2026-2796 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट चेन, जो Mozilla SpiderMonkey के WebAssembly इम्पोर्ट ऑप्टिमाइज़ेशन "JavaScript: WebAssembly" कंपोनेंट में JIT गलत-संकलन / टाइप-कन्फ्यूज़न है। एक क्राफ्टेड wasm मॉड्यूल संपूर्ण होस्ट प्रोसे...

9.8CVSS9AI score0.00648EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.7 views

MiracleLinux 8 : thunderbird-102.13.0-2.el8.ML.1 (AXSA:2023-6238:20)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6238:20 advisory. Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey...

8.8CVSS8.4AI score0.00755EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.8 views

MiracleLinux 9 : thunderbird-102.8.0-2.el9.ML.1 (AXSA:2023-5140:11)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-5140:11 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes...

8.8CVSS8.5AI score0.00817EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.6 views

MiracleLinux 9 : thunderbird-102.13.0-2.el9.ML.1 (AXSA:2023-6243:21)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6243:21 advisory. Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey...

8.8CVSS8.4AI score0.00755EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.6 views

MiracleLinux 7 : firefox-102.13.0-2.0.1.el7.AXS7 (AXSA:2023-6240:25)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6240:25 advisory. Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey...

8.8CVSS8.5AI score0.00755EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2025/12/09 4:17 p.m.10 views

CVE-2025-14331

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

6.5CVSS6.5AI score0.00183EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2025/12/09 4:17 p.m.12 views

CVE-2025-14322

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

8CVSS7.4AI score0.00331EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2025/12/09 4:17 p.m.10 views

CVE-2025-14330

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

9.8CVSS7.7AI score0.00495EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/12/09 4:17 p.m.8 views

CVE-2025-14321

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

9.8CVSS7.7AI score0.00583EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2025/11/11 12:00 a.m.8 views

CVE-2025-13023

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

9.8CVSS7.3AI score0.00355EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2025/11/11 12:00 a.m.9 views

CVE-2025-13019

Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS6.5AI score0.00257EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/11/11 12:00 a.m.11 views

CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS6.5AI score0.00257EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/11/11 12:00 a.m.11 views

CVE-2025-13027

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

8.1CVSS7.2AI score0.00332EPSS
SaveExploits0References3
Rows per page
Query Builder