The exploit collection can be found at
http://browserfun.blogspot.com. As can be expected, most of the exploits focus on Internet Explorer, but secuirty researcher DH Moore doesn't spare Safari and Firefox from his investigation, with both being featured once in the six exploits posted to date.
The interesting thing about the exploits is that they all run even with
fully patched systems and Moore even has demonstrations of the exploits in action.
Its not all bad though since all the exploits are being duly reported to the Open Source Vulnerability Database (osvdb.org).
The $64,000 question now is, which exploits will be exploited by the malware community, and which ones will Microsoft, Apple and Firefox choose to address before an attack comes out?
The challenge is even more daunting for Microsoft as it will undoubtedly get the lion's share of the collection and that its monthly patching schedule (Patch Tuesdays) gives malware authors almost a full month to use the exploits.
With the advisory bulletin due today, July 6, for what will come out for this month's patch Tuesday on July 11, researchers advise extra vigilance as the exploits are not easily preventable with typical firewall/antivirus setups.
Follow the browser exploits at
http://browserfun.blogspot.com (we caution against clicking the demonstrations)