CVE-2024-4947

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repository contains Analysis and PoCs to escalate this vulnerability to have the same exploit pattern as CVE-2024-12695, Object Hash Reassign. AddressOf / FakeObject Primitives constructed by using the type confusion to assign object hash to...

CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 50 Invalid syste...

CVE-2023-38831

CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file such as an ordinary .JPG file and also a folder that has the same name as t...

CVE-2023-38831-PoC

CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...

CVE-2022-47986

CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...

n-days

n-days 一个 iOS 漏洞 PoC 与 writeup 集合，涵盖由我亲自发现、通过对 In-The-Wild 更新进行二进制 diff 得出，或只是一些很酷的非公开漏洞。 CVE| 修复版本| Link| 由我报告| 已被野外利用ITW| 描述 ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - 信息| ✖️| ✖️| 内核 pc 控制 CVE-2021-1812| iOS 14.5| poc| ✅| ✖️| 内核越界读写？ -| iOS 14.5| poc - 信息| ✅| ✖️| 内核越界写入...

CVE-2026-85046

CVE-2026-85046 Chrome 零日漏洞在野被利用 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 您每笔捐赠的百分之十将捐献给金边甘塔博帕儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： bash 此命令需要 Bash 和...

CVE-2022-22620

CVE-2022-22620 CVE-2022-22620: Use-after-free in Safari https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22620.html...

cve-2019-1458_POC

CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild1. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to t...

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

0days-in-the-wild

実環境で悪用された0-day このリポジトリは、実環境（in-the-wild）での悪用が確認された0-day脆弱性に関するドキュメントのリファレンスです。各0-dayエクスプロイトの根本原因分析（RCA）と、各0-dayを追跡する表の両方が含まれています。 これらのドキュメントは、Github Pages（https://googleprojectzero.github.io/0days-in-the-wild）で閲覧することを想定しています。 免責事項 これは、Googleが公式にサポートする製品ではありません。...

cve-2017-0199

cve-2017-0199 Sample file used in the wild https://twitter.com/SyFi2k...

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

CVE-2023-38831-RaRCE

RaRCE, Exploit generator for CVE-2023-38831 This is an easy to install and easy to use, versatile exploit generator for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a...

cve-2023-5217-poc

CVE-2023-5217: libvpx VP8 Encoding Heap Overflow PoC CVE-2023-5217 is an in-the-wild exploited libvpx vulnerability that was found by Clément Lecigne of Google's Threat Analysis Group to be targeting Chrome. This repo shows how to trigger CVE-2023-5217 in the browser using the WebCodecs and...

CVE-2023-28252

CVE-2023-28252 The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252 So this weekend I was practising the Aero machine on Hack The Box. The box is so much fun playing it when you can mimic a real-world attack to a Windows 11 machine. After completing it, I was very curious and wanti...

CVE-2022-4262

Exploit for CVE-2022-4262 Official Chromium bug report. Shoutout to @clem1 for finding the ITW exploit. Shoutout to @5aelo for his RCA on the bug. Shoutout to @bjrjk for his super indepth RCA on the bug. Shoutout to @alisaesage for her video on the bug...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect Authentication Bypass Vulnerability ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone...

CVE-2025-24990

CVE-2025-24990 — Windows の信頼されていないポインタの参照外し EoP Sentinel AI Defense による調査レポート。防御的分析のみ — 動作するエクスプロイト や PoC はここでは公開されていません。 特権のある Windows コンポーネントが、信頼されていないコンテキストから受け取ったポインタを検証せずに 参照外しします。これにより、低特権の攻撃者は任意のメモリアクセスと SYSTEM への確実な経路を 得られます。2025 年に実際の攻撃で悪用されました。 📄 詳細記事:...