dom-vuln-db

KO | EN

gitlite — search

#python #hacktoberfest #llm #go #android #rust #docker #nodejs #macos #java #awesome #pytorch #openai #open-source

(★ 39)

A collection of Browser DOM Vulnerabilities with PoCs

dom-vuln-db Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Case Study of Browser DOM Vulnerabilities

> Inspired by [js-vuln-db](https://github.com/tunz/js-vuln-db)

## Chrome

CVE Number / ID | Module | Label | Credit
--------------- | ------ | ----- | ------
[CVE-2018-6073](./Chrome/CVE-2018-6073.md) | WebGL | Heap Overflow | om...@krash.in
[CVE-2018-16082](./Chrome/CVE-2018-16082.md) | sw::Surface | Stack Overflow | om...@krash.in
[CR-666246](./Chrome/CR-666246.md) | HTMLSelectElement | UAF | ifratric

## Firefox

CVE Number | Module | Label | Credit
---------- | ------ | ----- | ------
[CVE-2016-9079](./Firefox/CVE-2016-9079.md) | nsSMILTimeContainer | UAF | Daniel Veditz
[CVE-2017-5447](./Firefox/CVE-2017-5447.md) | gfxTextRun | OOB Read | ifratric
[CVE-2017-5465](./Firefox/CVE-2017-5465.md) | ConvolvePixel | Memory Disclosure | ifratric

## Edge

CVE Number | Module | Label | Credit
---------- | ------ | ----- | ------
[CVE-2016-0003](./Edge/CVE-2016-0003.md) | CDOMTextNode | Type Confusion | unknown
[CVE-2017-0037](./Edge/CVE-2017-0037.md) | CssParser | Type Confusion | ifratric
[CVE-2017-8496](./Edge/CVE-2017-8496.md) | CssParser | Type Confusion | ifratric
[CVE-2018-1021](./Edge/CVE-2018-1021.md) | CFormElement | OOB Read | akayn

## Webkit

CVE Number | Module | Label | Credit
---------- | ------ | ----- | ------
[CVE-2018-4197](./Webkit/CVE-2018-4197.md) | RenderTreeBuilder | UAF | ifratric
[CVE-2018-4306](./Webkit/CVE-2018-4306.md) | Node | UAF | ifratric
[CVE-2018-4312](./Webkit/CVE-2018-4312.md) | AXObjectCache | UAF | ifratric
[CVE-2018-4315](./Webkit/CVE-2018-4315.md) | SVGTRefElement | UAF, SVG | ifratric
[CVE-2018-4317](./Webkit/CVE-2018-4317.md) | RenderLayer | UAF | ifratric
[CVE-2018-4318](./Webkit/CVE-2018-4318.md) | SVGTextLayoutAttributes | UAF, SVG | ifratric
[CVE-2018-4323](./Webkit/CVE-2018-4323.md) | RenderMultiColumnSet | UAF | ifratric
[CVE-2018-4328](./Webkit/CVE-2018-4328.md) | InlineTextBox | OOB Read | ifratric

## IE

CVE Number | Module | Label | Credit
---------- | ------ | ----- | ------
[CVE-2012-4792](./IE/CVE-2012-4792.md) | CButton | UAF | unknown
[CVE-2015-6152](./IE/CVE-2015-6152.md) | CObjectElement | UAF | unknown
[CVE-2018-8460](./IE/CVE-2018-8460.md) | CStyleAttrArray | Double Free | Simon Zuckerbraun

dom-vuln-db

dom-vuln-db Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

dom-vuln-db

dom-vuln-db Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README