Gaining access to anyones Arc browser without them even visiting a website(kibty.town)
1332 points by xyzeva | 450 comments
A security researcher's blog post describing a Firebase misconfiguration in the Arc browser (CVE-2024-45489) that allowed remote code injection into any user's browser.










































![Screenshot of archives.evergreen.edu: A Cyborg Manifesto (1991) [pdf]](https://hn.urlbox.com/shots/renders/2024/9/19/cb504091-fa69-47ed-955a-3aa0f2289677.jpg)
