pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities Overview This repository contains exploitation and technical details of our Pwn2Own 2020 winning submission targeting Apple Safari with a kernel escalation of privilege for macOS 10.15.3. For further information, you can...

CVE-2025-43541

CVE-2025-43541 WARNING: POTENTIALLY UNSAFE CODE This repository contains a JavaScript / HTML Proof of Concept PoC related to a potential WebKit / JavaScriptCore vulnerability identified as CVE-2025-43541. Disclaimer This code may be unsafe. Running this HTML file can crash the browser, especially...

CVE-2025-43529

CVE-2025-43529 Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore. This repository contains a carefully structured root cause analysis slides for this vulnerability, intentionally organized as a tiered explanation to guide...

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research 📌 Overview This repository contains a comprehensive technical analysis and deobfuscation research of the Coruna iOS Exploit Kit. The research focuses on documenting how the exploit chain targets CVE-2024-23222 — a high-severity type confusion...

CVE-2019-8601

Exploiting CVE-2019-8601 This is an exploit for a WebKit vulnerability that was originally discovered by Fluoroacetate during the pwn2own competition in Vancouver. While I did not discover this bug, I wrote this exploit to practice my exploit development skills. The original writeup for this...

uaf-2023-28205

CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability This vulnerability affects Apple WebKit and can be exploited through maliciously crafted web content, potentially allowing arbitrary code execution in the context of the WebKit process. The affected WebKit build analyzed in this repository...

cve-2017-7117

cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

yova_ps5

YOVA PS5 - Relapse Exploit Suite YOVA PS5 is a modern, hi...

Exploit for Type Confusion in Apple Safari

CVE-2024-23222 PoC - Write-up: https://jamezx32.github.io/...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari

CVE-2018-4125 / 4161 / 4162 / 4163 PoC - Commit: WebKit...

Exploit for Improper Check for Unusual or Exceptional Conditions in Apple Ipados

CVE-2023-41993 PoC - Write-up: https://jamezx32.github.i...

JavaScriptCore Concurrent JIT Type Confusion

JavaScriptCore contains a TOCTOU type confusion in DFG concurrent compilation that can allow garbage collection of a constant-property cell. The supplied proof of concept exercises the condition against a vulnerable WebKit tree. https://packetstorm.news/download/235613...

WebKitGTK 2.42.0 JavaScriptCore Arbitrary Code Execution

WebKitGTK and WPE WebKit versions before 2.42.1 contain an improper check that may allow arbitrary code execution when processing malicious web content. This proof of concept triggers a JavaScriptCore DFG CSE property-access optimization error. https://packetstorm.news/download/235614...

Safari 11.0.1 JavaScriptCore Type Confusion

Safari version 11.0.1 JavaScriptCore contains type confusion issues that can lead to arbitrary code execution. Proof of concept code is provided for four related triggering expressions. https://packetstorm.news/download/235619...

PT-2026-107674

threatreport HighCompleteness DarkSword/Coruna Open Directory Finding Report | 07-10-2026 Source: https://t.co/CYqnWeWnOw Key details below ↓ 🧑‍💻Actors/Campaigns: Unc6353 Unc6748 💀Threats: Darksword tool, Coruna tool, Ds fusion, Gooll, Watering hole technique, Plasma, Ghost, Ghostblade, Ghostknife,...

Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 ReduceStrength...

UBUNTU-CVE-2026-74936

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

ANT-2026-K6DHGAYS · webkit · Heap-buffer-overflow

oob-write critical Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-K6DHGAYS: Heap-buffer-overflow in...

CLSA-2026-1777543457 webkit2gtk3: Fix of 9 CVEs

Update to 2.50.6 to fix the following vulnerabilities WSA-2026-0001: - CVE-2025-43213: type confusion in JavaScriptCore fixed in 2.50.5 - CVE-2025-43214: out-of-bounds read in WebCore fixed in 2.50.5 - CVE-2025-43457: integer overflow in WebKit canvas rendering fixed in 2.50.6 - CVE-2025-43511:...