Curated security research, vulnerabilities, advisories and tools for practitioners.

#firefox

Security coverage tagged firefox.

1.

IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT

vulnerability | High | 2026-07-10 00:00 | CVE-2026-10702 | nebusec.ai | original ↗ | #rce | #featured | #vulnerability-research

2.

Netlas Chrome and Firefox Extensions

blog | 2025-02-05 00:00 | netlas.io | original ↗ | #firefox | #chrome | #vulnerability-detection

3.

Concealing payloads in URL credentials

research | 2024-10-23 14:03 | portswigger.net | original ↗ | #firefox | #web-security | #dom-xss

4.

Framing without iframes

research | 2022-07-27 14:57 | portswigger.net | original ↗ | #firefox | #xss | #iframes

5.

Bypassing Firefox's HTML Sanitizer API

research | 2022-07-04 07:46 | portswigger.net | original ↗ | #browser-security | #firefox | #xss

6.

Bypassing DOMPurify again with mutation XSS

research | 2020-10-07 15:02 | portswigger.net | original ↗ | #firefox | #web-security | #chrome

7.

XSS in hidden input fields

research | 2019-06-14 12:03 | portswigger.net | original ↗ | #firefox | #web-security | #xss

8.

Provoking browser quirks with behavioural fuzzing

research | 2019-05-29 12:16 | portswigger.net | original ↗ | #firefox | #fuzzing | #xss

9.

NoScript Bypass

advisory | 2015-07-06 00:00 | bishopfox.com | original ↗ | #browser-security | #firefox | #advisory

10.

Guide to Hardening Your Firefox Browser in OS X

blog | 2013-05-22 00:00 | bishopfox.com | original ↗ | #browser-security | #endpoint-security | #firefox

11.

[V13P] SSL pain relief

blog | 2009-11-22 10:02 | portswigger.net | original ↗ | #burp-suite | #firefox | #proxy

12.

Problem accepting self-signed SSL certificates on FF3

blog | 2008-08-20 11:00 | portswigger.net | original ↗ | #burp-suite | #firefox | #proxy