ttt

[ttt @tchght]

@buptsb @dec_eax @NullSecurityX <vibe blog>

[j j @mistymntncop]

Exploit and mini writeup for CVE-2025-5419.
https://t.co/6XvoVSuii5

[ttt @tchght]

@xvonfers hey guy, why I can't find CL? something wrong?

[ttt @tchght]

@jopraveen18 I spent a little time to try the chal this weekend, but I got the time wrong, when I try to exp remote, I found the game is end lol. And the another fact is that my cve-2024-0517 exp use another heap spray method, It's stupid so I waste time lol.

[ttt @tchght]

@S1r1u5_ Seems you should use `arr3[15]` to crack some JSArray obj's elememts ptr, we can call it `foo_arr1`, just declare a `foo_arr2` after `foo_arr1`, and then debug to find the offset, just like use `arr3[20]` or something else, implement the `heap_write2` to continue your code

[ttt @tchght]

@mistymntncop @S1r1u5_ LOL, in fact, I met the same problem a few days ago, so I'm quite sensitive. Anyway, under the strong sandbox of v8, we need more times write in caged than before.

[ttt @tchght]

@S1r1u5_ I mean use `arr[15]` 13 times in your poc

[ttt @tchght]

@S1r1u5_ If failed after 13 times, it's about IC, use another index will avoid.

[ttt @tchght]

@BaoshengbinCumt @Choko1eto exp primitive is similar all the world, curious about which app😱

[ttt @tchght]

@BaoshengbinCumt 持续跟踪 ×
等你更新 √

[ttt @tchght]

@mistymntncop @xvonfers even typo "OOB" , i don't know what to say...

[ttt @tchght]

Nice work, I am a printer now

[Simone Margaritelli @evilsocket]

Attacking UNIX Systems via CUPS, Part I

https://t.co/T6SqraB5nh

[Jack Ren @bjrjk]

Released a slides for CVE-2022-4262! https://t.co/6Ubqyg2ocA

[Man Yue Mo @mmolgtm]

In this post I'll use CVE-2024-5830, a bug in object transitions in Chrome to gain RCE in the Chrome renderer sandbox: https://t.co/HT4cLMMA1q

[Xion @0x10n]

Also look at https://t.co/9udvU5brsy, a variant-of-a-variant bug that I've exploited on v8CTF :)

[ttt @tchght]

@udunadan after 1 year, you will find you will stuck in v8 sandbox ,even not browser sandbox.

[ttt @tchght]

@5n1p3r0010 https://t.co/4EZJqMknbP

[ttt @tchght]

@zh1x1an1221 @limeSec_ u 2

[ttt @tchght]

@sheep1028_0818 计科=人工智能，网安=密码学/人工智能，网安好考所以你会发现全周围全是来混学历的但是没有和你同行的人

[zhiniang peng @edwardzpeng]

Here is our slides for Zer0con 2024, Escaping the Sandbox (Chrome and Adobe Pdf Reader) on Windows https://t.co/He6mNe9WTu