Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-0816 PoC — 多款Mozilla产品权限许可和访问控制漏洞

Source
https://github.com/Afudadi/Firefox-35-37-Exploit
Associated Vulnerability
Title:多款Mozilla产品权限许可和访问控制漏洞 (CVE-2015-0816)
Description:Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.
Description
CVE-2015-0816 + CVE-2015-0802
Readme
# Firefox-35-37-Exploit

CVE-2015-0816 + CVE-2015-0802 for firefox
File Snapshot

 [4.0K]  /data/pocs/e7dfc7986578bcb381dc861a3f4646383d4be326
├── [ 14K]  PoC.html
└── [  67]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →