Hack The Real: An exploitation chain to break the Safari browser
Exploiting type confusion bugs in latest JSC and escaping the sandbox
more ...Exploiting type confusion bugs in latest JSC and escaping the sandbox
more ...A bug in VecDeque::reserve() of Rust's standard library allowed out-of-bound write in heap region.
more ...Exploiting TurboFan Through Bounds Check Elimination
more ...An analysis of an interesting vulnerability in Microsoft Edge
more ...Exploiting four integer overflow vulnerabilities in Python and PHP
more ...A few tricks to produce relocatable, reassemblable disassembly
more ...Nullify dangling pointers to stop use-after-free.
more ...Security issues caused by permission mismatch and inter-"component" interaction in ARC
more ...