~lobsters | Bookmarks (9)

clear filters

browsers × security ×

Browser Security Bugs that Aren’t: JavaScript in PDF

textslashplain.com

A fairly common security bug report is of the form: “I can put JavaScript inside a...
A fairly common security bug report is of the form: “I can put JavaScript inside a PDF file and it runs!” For example, open this PDF file with Chrome, and you can see the alert(1) message displayed: Support for JavaScript within PDFs is by-design and expected by the developers of PDF rendering software, including co...

browsers security
2
Rapidly Leveling up Firefox Security – Mozilla Security Blog

mozilla.org

browsers security
1
The V8 Sandbox · V8

v8.dev

browsers security
2
Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own

bleepingcomputer.com

Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited...
Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition. Manfred Paul (@_manfp) earned a $100,000 award and 10 Master of Pwn points after exploiting an out-of-bounds (OOB) write flaw (CVE-2024-29943) to gain ...

browsers firefox mozilla pwn2own security
1
Moving Forward, Together

chromium.org

browsers security
1
The right amount of poison — Paul Bone

bone.id.au

browsers firefox jemalloc memory mozjemalloc
1
Frederik Braun - How Firefox gives special permissions to some domains

frederik-braun.com

browsers security
1
MiraclePtr: protecting users from use-after-free vulnerabilities on more platforms

googleblog.com

Posted by Keishi Hattori, Sergei Glazunov, Bartek Nowierski on behalf of the MiraclePtr team Welcome back...
Posted by Keishi Hattori, Sergei Glazunov, Bartek Nowierski on behalf of the MiraclePtr team Welcome back to our latest update on MiraclePtr, our project to protect against use-after-free vulnerabilities in Google Chrome. If you need a refresher, you can read our previous blog post detailing MiraclePtr and its objec...

browsers security
1
Which Root Certificates should you trust? Find out with CertInfo - Raymii.org

raymii.org

Which Root Certificates should you trust? Did you know that any certificate authority can issue a...
Which Root Certificates should you trust? Did you know that any certificate authority can issue a certificate for any website? There are protocols in place so that should not happen, but when (not if, when) they get hacked or coerced by their government, they can issue a certificate to intercept secure communication...

browsers c++security
1

~lobsters | Bookmarks (9)

Tags

Domains

Browser Security Bugs that Aren’t: JavaScript in PDF

Rapidly Leveling up Firefox Security – Mozilla Security Blog

The V8 Sandbox · V8

Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own

Moving Forward, Together

The right amount of poison — Paul Bone

Frederik Braun - How Firefox gives special permissions to some domains

MiraclePtr: protecting users from use-after-free vulnerabilities on more platforms

Which Root Certificates should you trust? Find out with CertInfo - Raymii.org