chakra-exploit-framework

Chakra 利用框架 该仓库包含我为准备 EXP-401 课程 而编写的浏览器利用框架。该框架针对 Chakra 引擎，该引擎在 2019 年 Edge 切换到 v8 之前一直是 Edge 的一部分。 该框架中使用的演示漏洞是 CVE-2019-0567 类型混淆漏洞。 功能特性 为了让这个框架易于使用，我编写了一些很棒的功能，使得实现未来的沙箱逃逸变得非常容易。 抽象化的 Windows API 调用 该框架允许以高层方式调用 Windows API。它使用 GetProcAddress ROP 链来解析任意 API，并支持最多四个参数。 function...

CVE-2017-8641_chakra_Js_GlobalObject

描述 更多来自站点 CVE !!是的 Microsoft浏览器（运行于 Microsoft Windows 7 SP1、Windows Server 2008 R2 SP1、Windows 8.1 和 Windows RT 8.1、Windows Server 2012 及 R2、Windows 10 Gold、1511、1607、1703 以及 Windows Server 2016）在内存中处理对象时，由于 Microsoft 浏览器 JavaScript 引擎的渲染方式，允许攻击者在当前用户上下文中执行任意代码，此漏洞被称为“脚本引擎内存损坏漏洞”。此 CVE ID 不同于...

Chakra-CVE-2019-0567

Chakra-CVE-2019-0567 一个导致代码执行的chakracore框架中的类型混淆漏洞的POC。 源自 Connor McGar 的博客 https://connormcgarr.github.io/ 注意：偏移量和ROP小工具取决于你使用的Windows版本，因此可能不适用于你。如果你将我的代码与Connor的POC进行比较，你会发现大部分偏移量都不同。那是因为我必须找到自己的ROP小工具！...

Exploit for Out-of-bounds Write in Microsoft

chakra.dll Info Leak + Type Confusion for RCE Proof-of-Concept...

Malicious Package

Overview chakra-ui-2--react-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview chakra-ui-2--styled-system is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview chakra-ui-2--theme-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2026-3083

Malicious code in chakra-ui-2--react npm...

MAL-2026-272 Malicious code in chakra-ui-2--react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05221f163f14d551b861ff7d6ac6ea0d6c946d288b5d74ef14de5e10f6d6b43d The package chakra-ui-2--react was found to contain malicious code. Source: ghsa-malware...

MAL-2026-275 Malicious code in chakra-ui-2--theme-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88b6a088fbdbcacb5e2fc998737d4c0df9279035121b7bf69a626302c82dfa1 The package chakra-ui-2--theme-tools was found to contain malicious code. Source: ghsa-malware...

Malicious code in chakra-ui-2--react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05221f163f14d551b861ff7d6ac6ea0d6c946d288b5d74ef14de5e10f6d6b43d The package chakra-ui-2--react was found to contain malicious code. Source: ghsa-malware...

Malicious code in chakra-ui-2--react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8e94e720f2e969a3349854427d9ac418ea507516a488bc52eef4397d86e5e8 The package chakra-ui-2--react-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in chakra-ui-2--theme-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88b6a088fbdbcacb5e2fc998737d4c0df9279035121b7bf69a626302c82dfa1 The package chakra-ui-2--theme-tools was found to contain malicious code. Source: ghsa-malware...

MAL-2026-274 Malicious code in chakra-ui-2--styled-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8febe083a3c8d9449ea02eb0ab1ab112c8ea582743da6ce1f0ee9f0cb9d4d5 The package chakra-ui-2--styled-system was found to contain malicious code. Source: ghsa-malware...

Malicious code in chakra-ui-2--styled-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8febe083a3c8d9449ea02eb0ab1ab112c8ea582743da6ce1f0ee9f0cb9d4d5 The package chakra-ui-2--styled-system was found to contain malicious code. Source: ghsa-malware...

MAL-2026-273 Malicious code in chakra-ui-2--react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8e94e720f2e969a3349854427d9ac418ea507516a488bc52eef4397d86e5e8 The package chakra-ui-2--react-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3080

Malicious code in chakra-ui-2--theme-tools npm...

EUVD-2026-3081

Malicious code in chakra-ui-2--styled-system npm...

EUVD-2026-3082

Malicious code in chakra-ui-2--react-utils npm...

WordPress Chakra test plugin missing authorization vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in the WordPress Chakra test plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access contr...