Back to directory

WRITEUP #403

Reply to calc: The Attack Chain to Compromise Mailspring

XSSMutation XSSRCEElectronCSS exfiltration

by@YNizry(Yaniv Nizry)

Program

Mailspring

Published

Mar 11, 2024

Added to HackDex

May 11, 2024

Read Full Writeuphttps://www.sonarsource.com/blog/reply-to-calc-the-attack-chain-to-compromise-mailspring/

▸ RELATED WRITEUPS

Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution

From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

RCEConfusion attack

Studying 0days: How we hacked Anki, the world's most popular flashcard app

RCEComponents with known vulnerabilities

We hacked Anki - 0 day exploit from studying someone elses flashcards

RCEComponents with known vulnerabilities

Built with ❤️ by Shubham Rawat