Kompania Google rast\u00ebsisht hapi aksesin publik n\u00eb nj\u00eb raport (kopje publike), q\u00eb p\u00ebrmban shpjegime t\u00eb detajuara dhe nj\u00eb shembull eksploiti p\u00ebr nj\u00eb dob\u00ebsi, e cila ende nuk \u00ebsht\u00eb rregulluar n\u00eb motorin Chromium. Dob\u00ebsia \u00ebsht\u00eb njohur si e rrezikshme dhe studiuesi q\u00eb e zbuloi at\u00eb mori nj\u00eb shp\u00ebrblim prej $1000. Informacioni p\u00ebr problemin u d\u00ebrgua q\u00eb n\u00eb vitin 2022 dhe q\u00eb at\u00ebher\u00eb u diskutua periodikisht, por nuk u \u00e7ua deri n\u00eb fund, diskutimi p\u00ebr rregullimin e saj (nevojitej zbatimi i kufijve t\u00eb rinj p\u00ebr ngarkimin e vazhduesh\u00ebm). N\u00eb nj\u00eb nga diskutimet e tilla, zhvilluesit gabimisht e mor\u00ebn dob\u00ebsin\u00eb si t\u00eb rregulluar dhe hap\u00ebn aksesin publik p\u00ebr informacionin, ndon\u00ebse problemi kishte mbetur i pazgjidhur.<\/p>\n
Vulnerability allows the background JavaScript handler (Service Worker) to continue executing even after the browser window is closed, enabling an attacker to maintain persistent control over the browser with the ability to load and execute their JavaScript code at any moment in the context of their page. The attack scenario involves the attacker managing to open their page in a version of the browser that does not contain vulnerabilities, after which they wait for a serious vulnerability to be discovered in the browser and organize the execution of the exploit without the user needing to reopen the attacker's page. The essence of the method is to create a page with a Service Worker that performs a data loading operation that never gets interrupted. <\/p>\n
Sipas mendimit t\u00eb studiuesit q\u00eb e zbuloi problemin, k\u00ebt\u00eb dob\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb krijuar nj\u00eb botnet nga shfletuesit, p\u00ebrdoruesit e t\u00eb cil\u00ebve nuk dyshojn\u00eb q\u00eb nj\u00ebher\u00eb e zukur, sulmuesi mund t\u00eb ekzekutoj\u00eb me larg\u00ebsi kodin JavaScript n\u00eb pajisjen e tyre pa b\u00ebr\u00eb veprime nga ana e tyre. Nj\u00eb botnet e till\u00eb, madje pa shfryt\u00ebzimin e dob\u00ebsive t\u00eb tjera, mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar sulme DDoS dhe p\u00ebr t\u00eb proxy trafikun e d\u00ebmsh\u00ebm p\u00ebrmes sistemeve t\u00eb viktimave. Problemi prek t\u00eb gjith\u00eb shfletuesit mbi motorin Chromium. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"