Mozilla Firefox 注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• http://www.cnvd.org.cn/flaw/show/CNVD-2018-10243
• https://avd.aliyun.com/detail?id=AVD-2022-1802
• https://cloud.tencent.com/developer/article/2404232
• https://www.mozilla.org/en-US/security/third-party-software-injection/
• https://www.sentinelone.com/vulnerability-database/cve-2025-8030/
• https://global.ptsecurity.com/en/about/news/mozilla-patches-firefox-browser-vulnerability-discovered-by-pt/
• https://www.deceptivebytes.com/mozilla-firefox-vulnerable-to-injection-via-gecko-configuration-file/
• https://blog.mozilla.org/attack-and-defense/2020/07/07/hardening-firefox-against-injection-attacks-the-technical-details/
• https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/
• https://security.snyk.io/vuln/SNYK-UNMANAGED-FIREFOX-6466682

Related Vulnerabilities

• PoCgoogleapis-blogger-csp-bypass: Content-Security-Policy Bypass - Google APIs Blogger
• PoCgoogleapis-customsearch-csp-bypass: Content-Security-Policy Bypass - Google APIs Custom Search
• PoCpollbot-redirect: Mozilla Pollbot - Open Redirect
• （CVE-2025-4087）Firefox和Thunderbird XPath解析空值检查不足导致内存损坏漏洞
• （CVE-2025-4083）Firefox和Thunderbird进程隔离漏洞
• （CVE-2025-4082）macOS版Firefox和Thunderbird WebGL着色器越界读取漏洞可导致权限提升
• （CVE-2025-3034）Firefox和Thunderbird内存安全漏洞可导致任意代码执行
• RuleApi /system/isKey 默认口令漏洞
• Mozilla Firefox WebExtensions SettingContent-ms策略绕过漏洞
• Mozilla Firefox CVE-2022-26485 XSLT 进程释放后重利用漏洞
• Mozilla多个产品越界写入漏洞(CVE-2022-28281)
• Mozilla多个产品内存释放后再次引用漏洞(CVE-2022-28282)