WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — クロスポート傍受による同一オリジンポリシー（SOP）バイパス（CVE-2026-20643）...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE このPoCは、攻撃者が Orange Tsai氏の CVE-2024-4577 をDNSリバインディングと連鎖させ、被害者のウェブブラウザを介して内部ネットワークインフラ上でリモートコード実行を達成する方法を示しています。Same-Origin Policy SOP をバイパスし、local XAMPP servers 上で動作する脆弱な PHP-CGI インスタンス、内部開発環境、または企業ネットワークを悪用することで、この攻撃はインターネットに公開されることを意図されていないシステム上での完全なコード実行を可能にします。 ブログ...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

dref

DNSリバインディングエクスプロイトフレームワーク このプロジェクトはメンテナンスされていません。 drefはDNSリバインディングの重労働を行います。以下は、組み込みペイロードの一つからのスニペットで、フックされたブラウザからローカルサブネットをスキャンするためにフレームワークが使用される様子を示しています。ライブWebサービスを特定した後、Same-Originポリシーを簡単に突破してGETレスポンスを流出させます。 root@kitploit: // mainFrame runs first async function mainFrame // We use some trick...

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

whonow

Whonow DNS 서버 DNS 리바인딩 공격을 실행하기 위한 악성 DNS 서버입니다. whonow를 사용하면 도메인 요청 자체를 통해 DNS 응답 및 리바인드 규칙을 동적으로 지정할 수 있습니다. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and then 192.168.1.1 every time after that...

Astra Linux – Vulnerability in WebKit2GTK

This issue has been addressed through improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Processing maliciously crafted web content may bypass the Same Origin Policy...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been addressed through improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2, and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may allow bypass of the...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in the Network component of Google Chrome before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to perform certain UI gestures to bypass the same-origin policy through malicious network traffic. Chromium security severity: High...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, and watchOS 9.6. A website may be able to bypass the Same Origin Policy...

CVE-2026-43735

CVE-2026-43735 WebKit 교차 출처 정보 유출. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null 원리 부모 페이지가 을 사용하여 교차 출처 iframe의 프래그먼트 탐색을 트리거할 때, iframe이 수신하는 NavigateEvent.sourceElement는 부모 페이지의 요소이며, 는 부모 페이지의 전체 Document입니다. 따라서 교차 출처 iframe은 읽기, 수정DOM 변경 / 폼 action 변경, 심지어 를 주입하여 부모 도메인에서 JS를...

CVE-2017-17692

CVE-2017-17692 취약점 제목: SOP 우회 날짜: 2017년 9월 6일 소프트웨어 링크: https://play.google.com/store/apps/details?id=com.sec.android.app.sbrowser&hl=en 익스플로잇 작성자: Dhiraj Mishra 연락처: http://twitter.com/mishradhiraj 웹사이트: http://datarift.blogspot.in/ 카테고리: 브라우저 PoC 동영상: https://youtu.be/x8f-tQaZriQ 데모...