/
cves:CVE-2026-5873 × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · high

Breaking Into PostHog Prod Database

TLDR: PostHog used Playwright Chromium with --no-sandbox for heatmap screenshots. I used Claude to write a V8 n-day (CVE-2026-7899) exploit, got production RCE in a worker container with prod db access. I then used the same exploit as an evaluation for open-weight models. With the increasing number of supply chain attacks, I was thinking …

CVE-2026-7899 CVE-2026-5873 Play government media
hacktron.ai · high

I Let Claude Opus Write a Chrome Exploit: The Next Model (Mythos?) Won't Need My Help?

TLDR: I pointed Claude Opus at Discord’s bundled Chrome (version 138, nine major versions behind upstream) and asked it to build a full V8 exploit chain. The V8 OOB we used was from Chrome 146, the same version Anthropic’s own Claude Desktop is running. A week of back and forth, 2.3 billion tokens, $2,283 in API costs, and about ~20 hours…

CVE-2025-12429 CVE-2026-3910 CVE-2026-5873 media