jitsploitation

jitsploitation 古いJITバグであるCVE-2020-9802のiOSブラウザエクスプロイト。 これは、Project Zeroによって元々文書化された、macOSおよびiOS向けWebKitエンジンにおける人気のJITコンパイラバグのエクスプロイトです。私はブラウザエクスプロイトの学習演習として、このバグのエクスプロイトを再実装しました。 動画解説: 1クリックであなたのiPhoneをハックする方法 クレジット ProjectZero blog JakeBlair420の実装...

[SECURITY] Fedora 44 Update: webkitgtk-2.52.5-1.fc44

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

About the security content of Safari 26.3

About the security content of Safari 26.3 This document describes the security content of Safari 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

[SECURITY] Fedora 43 Update: webkitgtk-2.50.2-1.fc43

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

[SECURITY] Fedora 42 Update: chromium-142.0.7444.59-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 43 Update: webkitgtk-2.50.1-1.fc43

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

[SECURITY] Fedora 43 Update: chromium-141.0.7390.122-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

EUVD-2011-1797

Malware in sbrugna...

[SECURITY] Fedora 42 Update: webkitgtk-2.50.0-1.fc42

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Apple on Tuesday released security updates for its entire software portfolio, including a fix for a vulnerability that Google said was exploited as a zero-day in the Chrome web browser earlier this month. The vulnerability, tracked as CVE-2025-6558 CVSS score: 8.8, is an incorrect validation of...

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Apple on Tuesday released security updates for its entire software portfolio, including a fix for a vulnerability that Google said was exploited as a zero-day in the Chrome web browser earlier this month. The vulnerability, tracked as CVE-2025-6558 CVSS score: 8.8, is an incorrect validation of...

[SECURITY] Fedora 41 Update: chromium-137.0.7151.103-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 40 Update: chromium-136.0.7103.92-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 40 Update: chromium-135.0.7049.52-2.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

Apple warns of “privacy and security threats” after EU requires it to allow sideloading

Despite several warnings about the risks, Apple will allow European iPhone owners to install apps obtained from outside the official App store sideloading. These drastic changes are brought about to comply with the European Union’s EU Digital Markets Act DMA. The Digital Markets Act DMA establish...

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs

A group of academics has devised a novel side-channel attack dubbed iLeakage that exploits a weakness in the A- and M-series CPUs running on Apple iOS, iPadOS, and macOS devices, enabling the extraction of sensitive information from the Safari web browser. "An attacker can induce Safari to render...

PT-2024-1204

Name of the Vulnerable Software and Affected Versions webkit2gtk versions prior to 2.42.5-0ubuntu0.22.04.2 webkit2gtk3 affected versions not specified Apple products affected versions not specified Description The webkit2gtk and webkit2gtk3 engines contain a type confusion flaw. This issue is...

GNOME Web Cross-Site Scripting Vulnerability

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web has a cross-site scripting vulnerability that can be exploited by attackers to conduct exploit attacks via false pages...

PT-2020-6106

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 10.15.3 Apple tvOS versions prior to 13.3.1 Apple watchOS versions prior to 6.1.2 Apple Safari versions prior to 13.1.1 Apple iTunes versions prior to 12.10.7 for Windows Apple iCloud for Windows versions prior to...

Google Chrome Input Validation Error Vulnerability (CNVD-2020-02992)

Google Chrome is a web browser from Google, Inc. and WebKit is the web browser engine used in it. A security vulnerability exists in WebKit in Google Chrome. No details of the vulnerability are available at this time...