Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-0337 PoC — Google Chrome 安全漏洞

Source
https://github.com/maldev866/ChExp-CVE-2022-0337-
Associated Vulnerability
Title:Google Chrome 安全漏洞 (CVE-2022-0337)
Description:Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome 存在安全漏洞，该漏洞源于window.showSaveFilePicker函数在传递环境变量时将会进行解析并返回给用户环境变量值，攻击者可利用该漏洞在未授权的情况下，构造恶意数据执行信息泄露攻击，最终泄露系统环境变量。以下产品及版本受到影响：Windows版本Chrome 92-96、Microsoft Edge 92-96、Opera 78-82。
File Snapshot

 [4.0K]  /data/pocs/79a9b5443f86a6c45ff51729b28fb2d91109cb9c
├── [808K]  ChromExp_Env_demo.webm
└── [3.5K]  exploit.html

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.