Curated security research, vulnerabilities, advisories and tools for practitioners.

#firefox

Security coverage tagged firefox.

1.

IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT

vulnerability | High | 2026-07-10 00:00 | CVE-2026-10702 | nebusec.ai | Original ↗ | .md | #rce | #featured | #vulnerability-research

2.

Netlas Chrome and Firefox Extensions

blog | 2025-02-05 00:00 | netlas.io | Original ↗ | .md | #firefox | #chrome | #vulnerability-detection

3.

Concealing payloads in URL credentials

research | 2024-10-23 14:03 | portswigger.net | Original ↗ | .md | #firefox | #web-security | #dom-xss

4.

Framing without iframes

research | 2022-07-27 14:57 | portswigger.net | Original ↗ | .md | #firefox | #xss | #iframes

5.

Bypassing Firefox's HTML Sanitizer API

research | 2022-07-04 07:46 | portswigger.net | Original ↗ | .md | #browser-security | #firefox | #xss

6.

Bypassing DOMPurify again with mutation XSS

research | 2020-10-07 15:02 | portswigger.net | Original ↗ | .md | #firefox | #web-security | #chrome

7.

FF Sandbox Escape (CVE-2020-12388)

vulnerability | 2020-06-17 00:00 | CVE-2020-12388 | projectzero.google | Original ↗ | .md | #rce | #firefox | #sandbox-escape

8.

XSS in hidden input fields

research | 2019-06-14 12:03 | portswigger.net | Original ↗ | .md | #firefox | #web-security | #xss

9.

Provoking browser quirks with behavioural fuzzing

research | 2019-05-29 12:16 | portswigger.net | Original ↗ | .md | #firefox | #fuzzing | #xss

10.

[CVE-2016-9079] The Great DOM Fuzz-off of 2017

vulnerability | 2017-09-21 00:00 | CVE-2016-9079 | projectzero.google | Original ↗ | .md | #firefox | #fuzzing | #project-zero

11.

NoScript Bypass

advisory | 2015-07-06 00:00 | bishopfox.com | Original ↗ | .md | #browser-security | #firefox | #advisory

12.

Guide to Hardening Your Firefox Browser in OS X

blog | 2013-05-22 00:00 | bishopfox.com | Original ↗ | .md | #browser-security | #endpoint-security | #firefox

13.

[V13P] SSL pain relief

blog | 2009-11-22 10:02 | portswigger.net | Original ↗ | .md | #burp-suite | #firefox | #proxy

14.

Problem accepting self-signed SSL certificates on FF3

blog | 2008-08-20 11:00 | portswigger.net | Original ↗ | .md | #burp-suite | #firefox | #proxy