EIP-2026-114977

This exploit demonstrates a URL spoofing vulnerability in Baidu Spark Browser by using JavaScript to manipulate the address bar, allowing phishing attacks. The PoC opens a new window with fake content while displaying a legitimate URL.