Brash: Chromium Browser DoS Attack via document.title Exploitation

Brash is a critical vulnerability in Blink, the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM operations are managed.

😬 https://brash.run

#chromium #webbrowser #dosattack #blink #attack #dos #websecurity #brash #web #poc #documenttitle #websecurity #itsec #itsecurity #browser #google

»Crash, Boom, Bang—Offene Sicherheitslücke lässt fast alle aktuellen Browser abstürzen:
Das Problem betrifft sämtliche Chromium-basierten Browser und zeigt damit, wie weit die Monokultur in diesem Bereich vorangeschritten ist«

Vorher hatte ich oben den original Link getootet. Hier noch ein deutscher Artikel erklärend darüber.

😬 https://www.derstandard.at/story/3000000294355/offene-sicherheitsluecke-laesst-fast-alle-aktuellen-browser-abstuerzen

#chromium #webbrowser #dosattack #blink #attack #dos #websecurity #brash #web #poc #documenttitle #websecurity #itsec #browser #google #chrome

Brash: Chromium Browser DoS Attack via document.title Exploitation

Brash is a critical vulnerability in Blink, the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM operations are managed.

😬 https://brash.run

#chromium #webbrowser #dosattack #blink #attack #dos #websecurity #brash #web #poc #documenttitle #websecurity #itsec #itsecurity #browser #google

@jensimmons "there are now zero requirements for “installability” in Safari" - this is false statement. Still adding a web app to Home Screen on #iOS requires multiple clicks in menus and isn't intuitive. This is discriminating.

"Browser support started in November 2014, and Safari adopted in March 2018" - this summarizes how #Safari has long been lagging behind in supporting new features, e.g. #WebGPU has been supported in #Blink & #Gecko since 2023 and only now it's added to @webkit. So late!

If I had a more conspiracist mind, I'd say that the timing of #Google's proposal to remove #XSLT support from #Chrome#Chromium#Blink just as we are seeing a resurgence of interest in #RSS and the #indieWeb away from the centralized #GAFAM silos is quite suspicious.

What the fuck is wrong with #GoogleChrome / #Blink developers and their obsession with making the #web worse for everybody?

https://github.com/whatwg/html/issues/11523

We need to break #Google's dominance on the #web yesterday, and make it painful for them.

Blink and you'll miss it! 4096 colours and flashing text on the console! https://www.undeadly.org/cgi?action=article;sid=20250705081315 #openbsd #console #blink #4kcolours

Andreas Kling's keynote presentation on the #Ladybird #browser

https://youtu.be/9YM7pDMLvr4

#browsers #Google #Chrome #Chromium #Blink #WebKit #Safari #Apple #Brave #Vivaldi #Edge #Microsoft #Opera #Mozilla #Firefox #Gecko #engineering #coding #OpenSource #adtech #web #nonprofit #Linux #MacOS #Windows #Javascript