0days-in-the-wild

実環境で悪用された0-day このリポジトリは、実環境（in-the-wild）での悪用が確認された0-day脆弱性に関するドキュメントのリファレンスです。各0-dayエクスプロイトの根本原因分析（RCA）と、各0-dayを追跡する表の両方が含まれています。 これらのドキュメントは、Github Pages（https://googleprojectzero.github.io/0days-in-the-wild）で閲覧することを想定しています。 免責事項 これは、Googleが公式にサポートする製品ではありません。...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

ctftool

CTFTOOL システムエクスプロイトをテストしたいだけですか？ ここをクリック。 インタラクティブなCTF探索ツール これはctftoolです。CTF（Windowsでテキストサービスを実装するために使用される、あまり知られていないプロトコル）を試すためのインタラクティブなコマンドラインツールです。これは、Windowsの内部を研究したり、テキスト入力プロセッサの複雑な問題をデバッグしたり、Windowsのセキュリティを分析するのに役立つかもしれません。...

CVE-2021-30551

CVE-2021-30551 Chrome V8 CVE-2021-30551 のエクスプロイト Chrome のバージョンは chrome://version で確認できます。 または、http://whatsmyuseragent.org/ にアクセスしてください。 次のように python を使ってローカルに Web サーバーをセットアップできます: root@kitploit: python3 -m http.server 8080 そして、http://127.0.0.1:8080 にアクセスしてテストします。 参照 google project zero...

CVE-2021-26415

PoC CVE-2021-26415 的快速 PoC，详见 https://www.cloaked.pl/2021/04/cve-2021-26415/ BaitAndSwitch.exe 编译自 https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Safari における use-after-free Infoleak エクスプロイト - JSObject のアドレスを漏洩させる テスト済み: webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Google Project Zero による元の PoC:...

CVE-2016-9904

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2017-5378

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2020-1378

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

CVE-2020-1377

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

CVE-2018-0900

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-0582 Exploit PoC This repository provides a Proof-...

CVE-2015-0073

creationtimestamp| type| source ---|---|--- 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:53+00:00| seen|...

The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

Posted by Seth Jenkins, Google Project Zero This blog post provides a technical analysis of exploit artifacts provided to us by Google's Threat Analysis Group TAG from Amnesty International. Amnesty’s report on these exploits is available here. Thanks to both Amnesty International and Google's...

CVE-2024-49114

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:52:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113630508328834714 2025-01-07 05:40:37+00:00| seen|...

CVE-2024-43641

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471740904819107 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-43452

creationtimestamp| type| source ---|---|--- 2024-11-12 18:10:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113471327527148804 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-12-19 18:03:00+00:00| seen|...

Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...

CVE-2024-43047

creationtimestamp| type| source ---|---|--- 2024-10-07 13:12:47+00:00| seen| https://t.me/CyberBulletin/26001 2024-10-07 13:12:47+00:00| seen| https://t.me/CyberBulletin/1091 2024-10-07 15:57:40+00:00| seen| https://t.me/cvedetector/7216 2024-10-08 06:10:25+00:00| exploited|...