0days-in-the-wild

야생에서 악용된 0-day 이 저장소는 야생에서 악용된 것으로 탐지된 0-day 취약점에 관한 문서 모음입니다. 각 0-day 익스플로잇에 대한 근본 원인 분석RCA과 각 0-day를 추적하는 표를 모두 포함합니다. 이 문서들은 Github Pages를 통해 열람하도록 작성되었습니다: https://googleprojectzero.github.io/0days-in-the-wild 고지 사항 이 제품은 공식적으로 지원되는 Google 제품이 아닙니다...

CVE-2021-26415

PoC CVE-2021-26415에 대한 빠른 PoC입니다. https://www.cloaked.pl/2021/04/cve-2021-26415/ 에서 설명한 대로. BaitAndSwitch.exe는 https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch 에서 컴파일되었습니다...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

timesketch

Timesketch Содержание 1. О Timesketch 2. Начало работы 3. Сообщество 4. Участие в разработке О Timesketch Timesketch — это инструмент с открытым исходным кодом для совместного анализа криминалистических таймлайнов. Используя скетчи, вы и ваши соавторы можете легко организовывать свои таймлайны и...

ctftool

CTFTOOL Просто хотите протестировать эксплойт SYSTEM? Нажмите здесь. Интерактивный инструмент для исследования CTF Это ctftool — интерактивный инструмент командной строки для экспериментов с CTF, малоизвестным протоколом, используемым в Windows для реализации текстовых служб. Он может быть полезе...

CVE-2021-30551

CVE-2021-30551 Мой эксплойт для chrome V8 CVE-2021-30551 Вы можете найти свою версию Chrome через chrome://version или перейдите на http://whatsmyuseragent.org/ Вы можете запустить веб-сервер локально с помощью python, например: root@kitploit: python3 -m http.server 8080 И протестируйте его,...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free в Safari Эксплойт утечки информации — утечка адреса JSObject Протестировано на webkitgtk-2.34.3 UBUNTU64: https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Оригинальный PoC от Google Project Zero:...

CVE-2016-9904

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2017-5378

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2020-1378

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

CVE-2018-0900

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

CVE-2020-1377

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-0582 Exploit PoC This repository provides a Proof-...

CVE-2015-0073

creationtimestamp| type| source ---|---|--- 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:53+00:00| seen|...

The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

Posted by Seth Jenkins, Google Project Zero This blog post provides a technical analysis of exploit artifacts provided to us by Google's Threat Analysis Group TAG from Amnesty International. Amnesty’s report on these exploits is available here. Thanks to both Amnesty International and Google's...

CVE-2024-49114

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:52:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113630508328834714 2025-01-07 05:40:37+00:00| seen|...

CVE-2024-43641

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471740904819107 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-43452

creationtimestamp| type| source ---|---|--- 2024-11-12 18:10:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113471327527148804 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-12-19 18:03:00+00:00| seen|...

Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...