/
ttps_attack:T1059.007 × latest_source_host:hacktron.ai × limpar

Resultados

3 casos · pág. 1/1

hacktron.ai · high

Hacktron discloses one-click UXSS in Perplexity Comet via XSS on a perplexity.ai subdomain and externally_connectable abuse

Hacktron researchers disclosed a one-click universal XSS (UXSS) in Perplexity Comet, a Chromium-based AI browser with the Comet Assistant agent extension. The extension's manifest trusts the wildcard https://.perplexity.ai/ in externallyconnectable, so a single XSS on any perplexity.ai subdomain can reach privileged extension message hand…

technology
hacktron.ai · exploit público medium

Vercel React2Shell WAF bypass challenge: five parser-differential bypasses of CVE-2025-55182 protections found by Hacktron

Researchers at Hacktron (author ginoah) described five bypasses of the Vercel WAF rules protecting against React2Shell (CVE-2025-55182), a pre-auth RCE in React Server Functions affecting Next.js 15.x–16.0.6 and other React-based frameworks. The bypasses were found during a Vercel bounty challenge. Per Vercel's writeup, 116 researchers to…

CVE-2025-55182
hacktron.ai · high

Hacktron chains forums.openai.com postMessage XSS with exposed Mojo IPC in OpenAI ChatGPT Atlas to steal OAuth tokens

Researchers at Hacktron disclosed a vulnerability chain in OpenAI's ChatGPT Atlas Chromium-based AI browser that lets an attacker monitor all open tabs and capture OAuth authorization codes for any site, effectively breaking the same-origin policy. Atlas exposes Mojo IPC bindings to all .chatgpt.com and .openai.com origins, so a single XS…

technology