CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. Vulnerable browser version !IMPORTANT The Internet must be turned off during installation, otherwise the browser will be updated. You can download vulerable...

ReelPhish

Instructions for ReelPhish: This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Installation Steps 1. The latest release of Python 2.7.x...

firefox_tunnel

firefoxtunnel The way to use firefox to make a tunnel to remote communication. For I/O of payloads uses cookie.sqlite and html with javascript to auto submit, the browser runs in hidden mode. Read the docs: https://medium.com/code-fighters/firefox-tunnel-to-bypass-any-firewall-bc6f8b432980 Step b...

chromium-browser: skia: Memory corruption in Skia

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553126587...

chromium-browser: skia: Memory corruption in Skia

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576194994...

chromium-browser: skia: chromium-browser: Information leak in Skia

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514078656...

chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

chromium-browser: skia: chromium-browser: Uninitialized resource in Skia

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=561994362 https://code.google.com/p/chromium/issues/detail?id=102325...

chromium-browser: skia: Memory corruption in Skia

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936530...

chromium-browser: skia: Integer overflow in Skia

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562038679...

chromium-browser: skia: Out of bounds read in Skia

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/530237174...

chromium-browser: skia: Improper input validation in Skia

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936430...

chromium-browser: skia: Use after free in Skia

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/577403270...

chromium-browser: skia: Improper input validation in Skia

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574213633...

chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation

A flaw was found in Skia, a 2D graphics library used in chromium-browser. This improper state validation vulnerability allows a remote attacker, who has already compromised the renderer process, to read memory outside of the security sandbox. This can be achieved by enticing a user to open a...

chromium-browser: skia: Uninitialized resource in Skia

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561987051...

chromium-browser: skia: Improper input validation in Skia

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574776938...

chromium-browser: skia: Memory corruption in Skia

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570825067...

chromium-browser: skia: chromium-browser: skia: Use after free in Skia

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553345874...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...