uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js 소개 아래의 모든 내용은 Interrupt Labs가 게시한 문서에서 다루는 UC Browser 익스플로잇을 참조합니다. 시작하기 이 익스플로잇은 CVE-2022-1364의 RCE 버그를 포함하는 이전 버전의 UC Browser와 관련이 있습니다. 이 버그는 2024년 말 UC 브라우저에서 패치되었습니다. 이 익스플로잇을 실행하는 데 추가 종속성은 없습니다. 제공된 문서 링크를 확인하여 브라우저 및 익스플로잇 설치 과정을 확인하시기 바랍니다...

the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss

CVE-2026-78997 — UC 브라우저 for Android 범용 XSS UXSS CVE-2026-78997 에 대한 PoC 자료 — UC 브라우저 for Android com.UCMobile.intl, 버전 13.7.8.1314의 범용 크로스 사이트 스크립팅Universal Cross-Site Scripting, Omri Inbar Novee에 의해 공개됨. 브리지 화이트리스트에 등록된 도메인 mtmsg.uc.cn에서의 반사형 XSS는 권한이 있는 ucapi JavaScript 브리지에 대한 접근을 허용한다...

Exploit for CVE-2026-78997

CVE-2026-78997 — UC Browser for Android Universal XSS UXSS...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

EUVD-2026-72957

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

PT-2026-87176

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314 ) is vulnerable to a Universal Cross-Site Scripting (UXSS) flaw. The issue stems from a reflected XSS on the bridge-whitelisted domain mtmsg.uc.cn, which allows attackers to access the privileged ucapi JavaScript bridge. Speci...

CVE-2026-78997: Improper Neutralization of Input During Web Page Generation

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

Exploit for Type Confusion in Google Chrome

UCBrowserExploit.js Introduction All content below refer...

EUVD-2017-11056

Malware in sbrugna...

EUVD-2020-28491

Malware in sbrugna...

EUVD-2020-28490

Malware in sbrugna...

EUVD-2019-2255

Malware in sbrugna...

CVE-2019-10251

The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files related to libpicsel, which allows MITM attacks...

CVE-2019-10250

UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks...

CVE-2017-20041

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers URL. It is possible to launch the attack remotely...

CVE-2017-20041

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers URL. It is possible to launch the attack remotely...

CVE-2017-20041

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers URL. It is possible to launch the attack remotely...