Viayoo Via Browser 代码注入漏洞

Viayoo Via Browser is a lightweight free Android web browser from Viayoo. A code injection vulnerability exists in Viayoo Via Browser version 5.9.0 and prior versions, which stems from improper handling of the Javascript Bridge component...

CVE-2019-14453

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

CVE-2020-12404

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...

JavaScript bridge makes malware analysis with WinDbg easier

Introduction As malware researchers, we spend several days a week debugging malware in order to learn more about it. We have several powerful and popular user mode tools to choose from, such as OllyDbg, x64dbg, IDA Pro and Immunity Debugger. All these debuggers utilize some scripting language to...