1160 matches found
Tor-0day-JavaScript-Exploit
CVE-2024-9680 - TOR Browser 0day Exploit UAF Use-After-Free in Animation Timelines - Remote Code Execution Vulnerability Actively exploited in the wild targeting Tor Browser users View Analysis • Official CVE Overview This repository contains a comprehensive analysis and educational demonstration...
Firefox-CVE-2016-9079
Firefox RCE CVE-2016-9079 nsSMILTimeContainer これは https://www.exploit-db.com/exploits/41151 の手動エクスプロイトです。別のもの（https://github.com/soham23/firefox-rce-nssmil）がWindows 10用に存在しますが、Windows 8.1では動作しなかったため、独自に作成しました。 241行目を自分のシェルコードに変更する必要があります。この行の上に例があります。 リポジトリをダウンロードし、サーバーを起動します。Pythonサーバーで問題なく動作します...
Firefox-CVE-2024-9680
Firefox CVE-2024-9680 CVE-2024-9680 Description An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox E...
manim-cranim
cranim 暗号シーン向けの Manim ツールキット。サンプルギャラリーをチェックしてください: https://nccgroup.github.io/manim-cranim/ ローカルインストール: リポジトリのルートディレクトリから pip install -e . を実行してください（ローカルで変更を加える予定がない場合は pip install . でも構いません）。 これは Manim プラグインです。Manim では、プラグインをコマンドラインオプションまたは manim.cfg ファイルで明示的に有効にする必要があります。 詳細については、例えば...
firefox-rce-nssmil
Firefox RCE CVE-2016-9079 – Educational JavaScript Port Educational implementation of the public exploit for CVE-2016-9079, adapted from the original Exploit-DB/Metasploit module for standalone use. Disclaimer This repository is provided strictly for educational and research purposes. It contains...
Rocky Linux 9 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource / firefox-x11 (crlsa-2024_7958)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20247958 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the CIQ securi...
Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource (crlsa-2024_8024)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248024 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the CIQ securi...
Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource (crlsa-2024_7977)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20247977 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the CIQ securi...
Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource (crlsa-2024_8025)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248025 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the CIQ securi...
CVE-2024-37383-exploit
Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...
CVE-2024-42009-roundcube-xss
CVE-2024-42009 — Roundcube Webmail 1.6.6 保存型XSS PoC 認可されたセキュリティテスト、CTF環境、教育研究専用です。 このツールを、所有していない、または書面による許可を得ていないシステムに対して使用することは、英国のComputer Misuse Act 1990、米国のCFAA、および世界各国の同等の法律の下で違法となります。 脆弱性の概要 フィールド| 詳細 ---|--- CVE| CVE-2024-42009 影響を受けるソフトウェア| Roundcube Webmail ≤ 1.6.6 修正バージョン| 1.6.7 / 1.6....
CVE-2025-1639
🔓 Exploit Script for CVE-2025-1639 📝 Description The Animation Addons for Elementor Pro plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installelementorpluginhandler function in all versions up to, and including, 1.6. This...
printer-cracktro
printer cracktro My Pwn2Own entries for Pwn2Own Toronto 2022 targeted two different printers. One is Linux based Lexmark and other is DryOS based CANON. After pwning the software on the printer the entries would display a little oldschool crack-intro animation thing to celebrate/illustrate the...
Astra Linux – Vulnerability in Chromium
Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
FreeBSD : mailpit -- Multi-frame animation bypass of thumbnail pixel budget (c1980e14-b424-11f1-bd9f-10ffe07f9334)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c1980e14-b424-11f1-bd9f-10ffe07f9334 advisory. Mailpit author reports: The fix for CVE-2026-67446 / GHSA-75mr-qw9x-3r39 Thumbnail generation decodes...
mailpit -- Multi-frame animation bypass of thumbnail pixel budget
Mailpit author reports: The fix for CVE-2026-67446 / GHSA-75mr-qw9x-3r39 "Thumbnail generation decodes unbounded image dimensions before scaling", patched in v1.30.4 bounds only the width × height of a single frame. The decoded-size budget is still not enforced over frame count, so an animated PN...
CVE-2026-92037
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Animation component...
Linux Distros Unpatched Vulnerability : CVE-2026-92037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. CVE-2026-92037 Note that Nessus...
