{"vulnerability": "cve-2019-9810", "sightings": [{"uuid": "6c29d952-472c-49cb-b35e-e48a8d16b41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "exploited", "source": "https://t.me/itsec_news/1735", "content": "\u200b\ud83d\udde1 \u041d\u043e\u0432\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 Cloud9 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83d\udcac \u041e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Zimperium, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0433\u043e Cloud9. \u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u043c\u0435\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c cookie-\u0444\u0430\u0439\u043b\u044b, \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434, \u043c\u0430\u0439\u043d\u0438\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a. \u041f\u043e\u043c\u0438\u043c\u043e \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0431\u043e\u0442\u043d\u0435\u0442 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0437\u0436\u0435 \u0432\u0437\u044f\u0442\u044c \u0435\u0433\u043e \u043f\u043e\u0434 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0434\u0434\u043e\u043d \u043d\u0435 \u043d\u0430\u0439\u0442\u0438 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Chrome \u0438\u043b\u0438 Edge, \u043e\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043a\u0430\u0447\u0430\u0442\u044c Cloud9, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Adobe Flash Player.\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0436\u0435\u0440\u0442\u0432\u0430 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435, \u043e\u043d\u043e \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JS-\u0444\u0430\u0439\u043b \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \"campaign.js\" \u043d\u0430 \u0432\u0441\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043c\u0430\u0439\u043d\u0438\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \"cthulhu.js\".\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Mozilla Firefox ( CVE-2019-11708, CVE-2019-9810 ), Internet Explorer ( CVE-2014-6332 , CVE-2016-0189 ) \u0438 Edge ( CVE-2016-7200 ), \u0447\u0442\u043e\u0431\u044b \u0441\u0431\u0435\u0436\u0430\u0442\u044c \u0438\u0437 \u201c\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u201d \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043a\u0430\u043a \u043a\u0435\u0439\u043b\u043e\u0433\u0433\u0435\u0440 \u0438 \u043a\u0430\u043d\u0430\u043b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u043c\u0443 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430, cookie-\u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c DDoS-\u0430\u0442\u0430\u043a\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Zimperium \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Cloud9 \u0441\u0442\u043e\u0438\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Keksec (\u043e\u043d\u0430 \u0436\u0435 Kek Security, Necro \u0438 FreakOut), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u043f\u044b\u0442 \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432. \u041e\u0434\u043d\u043e \u0438\u0437 \u0435\u0435 \u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u2013 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 EnemyBot, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\n#Cloud9 #\u0411\u043e\u0442\u043d\u0435\u0442 #\u0425\u0430\u043a\u0435\u0440\u044b\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-11-11T10:05:08.000000Z"}, {"uuid": "c156652d-30d3-4173-a826-b96a3c4251a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/antichat/4165", "content": "Firefox \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c Pwn2own 2019 \u0443\u0436\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0444\u0438\u043a\u0441\u044b \u0434\u043b\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: https://www.mozilla.org/en-US/security/advisories/mfsa2019-09/\n\n\u0424\u0438\u043a\u0441\u044b CVE-2019-9810: https://github.com/mozilla/gecko-dev/commit/601d226fe3690ff57287580431fd9a937298be80, https://github.com/mozilla/gecko-dev/commit/752be3958fc6f6eb83eaa4a35fae1a99dc54746e. \n\n\u0424\u0438\u043a\u0441 CVE-2019-9813: https://github.com/mozilla/gecko-dev/commit/369406707f9fef96ac8405fb9cbb58da4bcc4f1d\u0431. \n\nP.S. \u041e\u043d\u0438 \u043e\u0442\u043b\u0438\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e Bug ID \u0432 https://github.com/mozilla/gecko-dev/", "creation_timestamp": "2019-03-26T12:41:31.000000Z"}, {"uuid": "d7d08641-16bd-4b8c-8735-42ed3a16aeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "exploited", "source": "https://t.me/antichat/4535", "content": "The Story of Two Winning Pwn2Own JIT Vulnerabilities in Mozilla Firefox (CVE-2019-9810/CVE-2019-9813 )\n\nhttps://www.thezdi.com/blog/2019/4/18/the-story-of-two-winning-pwn2own-jit-vulnerabilities-in-mozilla-firefox\n\n#re #expdev #poc #jit #darw1n", "creation_timestamp": "2019-04-19T08:09:58.000000Z"}, {"uuid": "f8d0d280-86f6-4f47-82c3-b3ed39db9d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/antichat/4534", "content": "ZDI \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c PoC\u2019\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FireFox, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 Pwn2Own 2019 (CVE-2019-9810 \u0438 CVE-2019-9813). \n\nhttps://www.thezdi.com/blog/2019/4/18/the-story-of-two-winning-pwn2own-jit-vulnerabilities-in-mozilla-firefox", "creation_timestamp": "2019-04-19T07:33:18.000000Z"}, {"uuid": "95881f13-1f5a-495e-bb05-52d1d3a23774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/R0_Crew/1051", "content": "The Story of Two Winning Pwn2Own JIT Vulnerabilities in Mozilla Firefox (CVE-2019-9810/CVE-2019-9813 )\n\nhttps://www.thezdi.com/blog/2019/4/18/the-story-of-two-winning-pwn2own-jit-vulnerabilities-in-mozilla-firefox\n\n#re #expdev #poc #jit #darw1n", "creation_timestamp": "2019-05-14T06:25:49.000000Z"}, {"uuid": "7c60e14a-cfa4-4fce-8787-34dbdff9b606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/83", "content": "Firefox \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c Pwn2own 2019 \u0443\u0436\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0444\u0438\u043a\u0441\u044b \u0434\u043b\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: https://www.mozilla.org/en-US/security/advisories/mfsa2019-09/\n\n\u0424\u0438\u043a\u0441\u044b CVE-2019-9810: https://github.com/mozilla/gecko-dev/commit/601d226fe3690ff57287580431fd9a937298be80, https://github.com/mozilla/gecko-dev/commit/752be3958fc6f6eb83eaa4a35fae1a99dc54746e. \n\n\u0424\u0438\u043a\u0441 CVE-2019-9813: https://github.com/mozilla/gecko-dev/commit/369406707f9fef96ac8405fb9cbb58da4bcc4f1d\u0431. \n\nP.S. \u041e\u043d\u0438 \u043e\u0442\u043b\u0438\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e Bug ID \u0432 https://github.com/mozilla/gecko-dev/", "creation_timestamp": "2019-03-26T12:39:33.000000Z"}, {"uuid": "f33bd256-0880-4aa5-a008-a4f0c0916a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/br0wsec/88", "content": "ZDI \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c PoC\u2019\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FireFox, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 Pwn2Own 2019 (CVE-2019-9810 \u0438 CVE-2019-9813). \n\nhttps://www.thezdi.com/blog/2019/4/18/the-story-of-two-winning-pwn2own-jit-vulnerabilities-in-mozilla-firefox\n\n\u0410 \u0435\u0449\u0451 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 9813 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0442\u0443\u0442:\n\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1810", "creation_timestamp": "2019-04-19T09:38:26.000000Z"}, {"uuid": "5322ae19-4b2b-461d-a60d-266129b50e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/ExcreamOnSecurity/325", "content": "Full chain exploit for CVE-2019-11708 & CVE-2019-9810\n\nThis is a full browser compromise exploit chain (CVE-2019-11708 & CVE-2019-9810) targeting Firefox on Windows 64-bit. It uses CVE-2019-9810 for getting code execution in both the content process as well as the parent process and CVE-2019-11708 to trick the parent process into browsing to an arbitrary URL.\n\nhttps://github.com/0vercl0k/CVE-2019-11708\n#exploit #firefox #exploitation #windows", "creation_timestamp": "2019-12-13T13:24:01.000000Z"}, {"uuid": "e55d0c60-f754-46a4-a3e7-63ed94523995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/information_security_channel/25798", "content": "Firefox 66.0.1 Released with Fix for Critical Security Vulnerabilities that discovered via Trend Micro\u2019s Zero Day Initiative. The vulnerability affects all the versions of Firefox below 66.0.1. An attacker could exploit these vulnerabilities to take complete control over the target system of the process. CVE-2019-9810: Incorrect alias information Incorrect alias information with IonMonkey JIT compiler [\u2026]\nThe post Firefox 66.0.1 Released with Fix for Critical Security Vulnerabilities (https://gbhackers.com/firefox-66-0-1-released/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2019-03-24T09:18:33.000000Z"}, {"uuid": "da781e7e-1c60-4b6b-ba28-12bd8ee6eec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "exploited", "source": "https://t.me/secinfosex/31", "content": "\u26a0\ufe0f\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 Firefox\n\nCVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement\n\nIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. \n\n\u2b55\ufe0f We are aware of targeted attacks in the wild abusing this flaw.\n\n\u0421\u0445\u043e\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0431\u044b\u043b\u0430 \u043d\u0430 \u043d\u0430 pwn2own:\nhttps://www.thezdi.com/blog/2019/4/18/the-story-of-two-winning-pwn2own-jit-vulnerabilities-in-mozilla-firefox\n\n\u0414\u0430\u0436\u0435 \u043f\u0430\u0442\u0447\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b:\n1. https://github.com/mozilla/gecko-dev/commit/369406707f9fef96ac8405fb9cbb58da4bcc4f1d\n2. https://github.com/mozilla/gecko-dev/commit/2e7bcc8dfa4fce5c8f3d8b224abde0627e1dee0e\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442:\nhttps://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/\n\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2020-03/", "creation_timestamp": "2020-01-09T07:14:27.000000Z"}, {"uuid": "d0f22a71-3c59-48ed-8161-ffb24fcae0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/474", "content": "#exploit\n1. Full exploit chain (CVE-2019-11708, CVE-2019-9810) against Firefox on Windows 64-bit\nhttps://github.com/0vercl0k/CVE-2019-11708\n\n2. CVE-2019-1653:\nCisco RV320/RV325 Router Vulnerability\nhttps://github.com/ibrahimzx/CVE-2019-1653", "creation_timestamp": "2024-10-11T22:18:58.000000Z"}, {"uuid": "a20ad4fb-b433-4888-a2f7-7e9ba05d63d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/nonamepodcast/30", "content": "Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.\n\nhttps://github.com/0vercl0k/CVE-2019-11708", "creation_timestamp": "2026-08-01T20:00:04.935406Z"}, {"uuid": "bdc7ce58-d417-4eef-a5c0-9da8324c85c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1130", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-08-03T11:08:45.087296Z"}, {"uuid": "ba8d1d36-de43-4ac4-884a-b34bf74bdf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1074", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-08-03T12:12:27.386971Z"}, {"uuid": "5df26e39-cc88-46da-99fb-e4f2a80abd4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/nonamepodcast/30", "content": "Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.\n\nhttps://github.com/0vercl0k/CVE-2019-11708", "creation_timestamp": "2026-08-02T00:00:20.642863Z"}, {"uuid": "0a070697-d55d-47ca-9363-30fcf31a7227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1074", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-08-04T00:00:40.840707Z"}, {"uuid": "430b4c9c-339e-4349-b7a1-26550c7b295e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1130", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-08-04T00:00:41.802191Z"}, {"uuid": "729ddaa9-470a-4254-b8f1-2649447573bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/reverseame/1130", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-07-29T12:02:58.332666Z"}, {"uuid": "64463c20-9f7a-476e-b7f4-bdcfcd6f6614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/reverseame/1074", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-07-29T12:02:59.030713Z"}, {"uuid": "3af199a8-7414-4ded-a53c-1b10219e7153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/reverseame/1130", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-07-30T00:02:47.975752Z"}, {"uuid": "80cd2a19-5991-46ad-8881-50f61369704f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/reverseame/1074", "content": "A journey into IonMonkey: root-causing CVE-2019-9810 https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/", "creation_timestamp": "2026-07-30T00:02:48.603463Z"}, {"uuid": "51702eec-8093-4366-b925-b77145a221a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-01T20:00:59.567015Z"}, {"uuid": "2dbd4798-208f-4816-8501-8b75758618ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-02T01:01:20.286021Z"}, {"uuid": "6f978d40-934d-4421-b4ef-fda646af85d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-04T15:00:05.072752Z"}, {"uuid": "02f5fd57-0c08-409a-a16e-c59e8ffae12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9810", "type": "seen", "source": "https://t.me/hacking_Attack/98318", "content": "Kali Linux Tutorials\nHow to Secure your Browsers from Malicious Extensions?\n\nIn the first half of 2022, 1.3 million users suffered data breaches because of harmful extensions.\n\nMalicious extensions are considered major risk factors as they can easily penetrate your endpoints and cause major system compromises.\n\nUnsigned and unsafe extensions are considered to be potentially harmful to your browsers. Browser extensions are inherently weak in terms of security. \n\nAdditionally, the lack of visibility over the installed extensions, and the permissions they require, makes it impossible for IT administrators to manage them. \n\nHere are a few recent cases of why your browser extensions threaten your entire network.\n\n1. Chrome browser extension SearchBlox installed by more than 200,000 users, has been discovered to contain a backdoor that can steal your Roblox credentials and assets.\n\n1. An information-stealing Google Chrome browser extension named VenomSoftX is being deployed to steal cryptocurrency and clipboard contents as users browse the web.\n\n1. A new Chrome browser botnet named Cloud9 has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim\u2019s browser in DDoS attacks.\n\nLet\u2019s quickly look into one of the attacks. The Troubles of Being on Cloud9With the new browser botnet, Cloud9, waiting to penetrate your browsers remotely to access and steal your sensitive and confidential data, staying safe while browsing the internet can be challenging. \n\nAs reported by Bleeping Computer, this remote access Trojan named Cloud9 allows cyberattackers to execute commands remotely to steal your data. This malicious extension is not found in the Chrome store but has been reported to be installed by other means. What\u2019s the story of Cloud9?The malicious Cloud9 extension consists of three JavaScript files that can gather system information, leverage host resources to mine cryptocurrency, perform DDoS attacks, and inject code to run browser exploits.\n\nThe following exploits for vulnerabilities have been observed on various browsers:\n\n* Firefox: CVE-2019-11708 and CVE-2019-9810\n* Internet Explorer: CVE-2014-6332 and CVE-2016-0189\n* Edge: CVE-2016-7200\n\nThese exploits automatically install and run Windows malware on the host machines, which not only can lead to further system compromises. Learn how Browser Security Plus Provides the Right Solution against Malicious Extensions.With Browser Security Plus, you can manage the extensions installed on your browsers across your network. To defeat this malicious Remote Access Trojan, you must only allow the safe and wanted extensions in all your browsers.\n\nHere\u2019s how you can manage these extensions seamlessly using Browser Security Plus\n\n1. Discover potentially harmful extensions being used in your network.\n2. Remove unnecessary extensions.\n3. Block permissions directly instead of blocking extensions. This will ensure that all extensions that use the blocked permissions will be removed.\n4. Gain comprehensive insights about the extensions that are installed on your browsers.\n5. Allow and block extensions based on user requirements.\n\nTo avoid extensions being installed from unknown and third-party stores, Browser Security Plus allows you to maintain your extension repository, where you can add extensions based on their extension identifier.\n\nWith Browser Security Plus, you gain holistic insights into your network\u2019s browsers, extensions, and plug-ins. \n\nYou can also lock down your enterprise browsers, harden your browser settings, and filter out malicious web applications to stay safe from cyberattacks. Learn more about implementing a safe browsing experience for your end users!\n\nBrowser Security Plus is your one-stop solution to prevent browser-based attacks and manage multiple browsers across your enterprise network. Secure your browsers now! Get a free 30-day trial here!", "creation_timestamp": "2026-09-05T01:00:25.122816Z"}]}