cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783: Fuga da Sandbox do Mojo do Google Chrome Pontuação CVSS: 8.3 Alta Descoberto por: Kaspersky Status: Ativamente explorado na natureza campanhas de espionagem Visão Geral CVE-2025-2783 é uma vulnerabilidade de elevação de privilégio específica do Windows no framework de Comunicação...

CVE-2025-2783

CVE-2025-2783 PoC simulato per CVE-2025-2783 — una vulnerabilità di sandbox escape in Mojo IPC di Chrome. Include consegna phishing, fuzzing di memoria, simulazione IPC e logging. Sicuro per demo di red team, ingegneria della rilevazione e uso didattico. Questo progetto simula un proof-of-concept...

CVE-2025-2783

SandBoxEscapeSim CVE-2025-2783: Simulação Educacional de Escape de Sandbox para Chrome Autor: Byte Reaper @ByteReaper0 Visão Geral Este projeto é uma simulação educacional e voltada à pesquisa , projetada para demonstrar o conceito de uma vulnerabilidade de escape de sandbox no Google Chrome vers...

mojo-v

Mojo-V: Calcolo Segreto per RISC-V Mojo-V pronunciato “mojo-five” è una nuova estensione RISC-V che introduce capacità di programmazione orientate alla privacy per RISC-V. Mojo-V implementa il calcolo segreto, consentendo un'esecuzione sicura, efficiente e data-oblivious senza affidarsi a softwar...

Security update for perl-Mojo-JWT (moderate)

openSUSE Security Update: Security update for perl-Mojo-JWT Announcement ID: openSUSE-SU-2026:0279-1 Rating: moderate References: 1271935 Cross-References: CVE-2026-9537 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...

OPENSUSE-SU-2026:11450-1 perl-Mojo-JWT-1.20.0-2.1 on GA media

These are all security issues fixed in the perl-Mojo-JWT-1.20.0-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the Mojo browser library in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Mojo library in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-14109

An insufficient policy enforcement flaw was found in the Mojo component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513694957...

OESA-2026-3159 perl-Mojolicious security update

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Integer overflow in Mojo in Google Chrome prior to version 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of Mojo after free in Google Chrome before version 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

Updated perl-Mojolicious package fixes a security vulnerability

The updated package fixes a security vulnerability: Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. CVE-2026-14803...

Linux Distros Unpatched Vulnerability : CVE-2026-9537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to...

CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

UBUNTU-CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

CVE-2026-9537

Mojo::JWT on Perl versions before 1.02 is vulnerable to a timing attack in verify HMAC signatures. The decode() path compares the provided signature to the recomputed HMAC using Perl's eq operator, which short-circuits on the first non-matching byte, causing a variable-time comparison proportiona...

CVE-2026-9537 Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...