what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Niklas Baumstark

Google Chrome XOR Typer Out-Of-Bounds Access / Remote Code Execution

Posted May 3, 2021

Authored by Niklas Baumstark, Grant Willcox, Rajvardhan Agarwal, Bruno Keith | Site metasploit.com

This Metasploit module exploits an issue in the V8 engine on x86_x64 builds of Google Chrome versions prior to 89.0.4389.128/90.0.4430.72 when handling XOR operations in JIT'd JavaScript code. Successful exploitation allows an attacker to execute arbitrary code within the context of the V8 process. As the V8 process is normally sandboxed in the default configuration of Google Chrome, the browser must be run with the --no-sandbox option for the payload to work correctly.

tags | exploit, arbitrary, javascript

advisories | CVE-2021-21220

SHA-256 | 021951718048ffe0b71a7648ba64e0929b63f860f2b0a3b5424af17523e26274

Download | Favorite | View

Oracle VirtualBox Guest To Host Escape

Posted Jan 24, 2018

Authored by Niklas Baumstark

Oracle VirtualBox versions prior to 5.1.30 and 5.2-rc1 suffer from a guest to host escape vulnerability.

tags | exploit

advisories | CVE-2018-2698

SHA-256 | 37171e7fb0e09cca0dcc959316847810166226ad6efea84e496c535d82b620cd

Download | Favorite | View