Some of my security stuff and vulnerabilities. Nothing advanced. More to come.

Go to file

Michael McMahon a6488d1bd7 Add vim settings to disable modeline		2019-06-08 04:18:45 +02:00
data/2019-06-04_ace-vim-neovim	Add poc files	2019-06-06 03:31:03 +02:00
doc	Add vim settings to disable modeline	2019-06-08 04:18:45 +02:00
README.md	Add hint about CTF write-ups	2019-06-06 05:37:22 +02:00

security

This repository will contain security-related stuff I'm doing. (Also, @rawsec on Twitter)

Recent:

More to come...

Some older bugs:

2017-01-25 Google Chrome: Address spoofing in Omnibox (CVE-2017-5015)
2017-01-24 Mozilla Firefox: Location bar spoofing with unicode characters (CVE-2017-5383)
2016-06-07 Mozilla Firefox: Partial SOP violation via forged location.host (CVE-2016-2825)
2015-05-19 Google Chrome: Cross-origin bypass in Editing (CVE-2015-1254)
2015-04-03 Mozilla Firefox: Privileged URLs processed by about:reader (CVE-2015-0798)
2015-03-31 Mozilla Firefox: Addon permissions exposed to man-in-the-middle attacks (CVE-2015-0812)
2015-02-24 Mozilla Firefox: Local files or privileged URLs in pages can be opened into new tabs (CVE-2015-0821)
2015-02-24 Mozilla Firefox: Arbitrary File Read Vulnerability via Form Autocomplete (CVE-2015-0822)

CTF write-ups: