CVE-2018-15676: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crkprotection.php anti-XSS mechanism that looks for a number of dangerous fingerprints...

CVE-2017-2491

CVE-2017-2491 is a Use-After-Free in JavaScriptCore (WebKit) used by Apple Safari on iOS/macOS. The flaw affects the String.replace path in JavaScriptCore, enabling remote code execution via a crafted web page or file. Apple’s advisories for Safari/WebKit updates around Safari 10.1 and iOS 10.3 (...

PT-2017-15407

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 10.3 Description The issue is related to a use after free vulnerability in the String.replace method in JavaScriptCore. This allows remote attackers to execute arbitrary code via a crafted web page or a crafted...

(Pwn2Own) Apple Safari String replace Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...