cve-2019-2215-3.18

cve2019-2215-3.18 cve2019-2215 poc per kernel 3.18 Basato sul POC di Maddie Stone da https://bugs.chromium.org/p/project-zero/issues/detail?id=1942...

cve-2019-2215

CVE-2019-2215 Project Zero bug 1942...

CVE-2019-2215

CVE-2019-2215 Copiato e incollato da: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ https://github.com/grant-h/qu1ckr00t/blob/master/native/poc.c...

CVEREV3

CVEREV3 Test di CVE-2021-30858 Rev3 post originale : https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30858.html...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free in Safari Infoleak-Exploit – leakt eine Adresse eines JSObject Getestet auf webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Original PoC von Google Project Zero:...

cve-2019-11707

SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/p/project-zero/issues/detail?id=1820 Schermate File exploit.js - Exploit vero e proprio, preceduto da util.js e Int64.js di saelo. stager.js - Usato per creare costanti, preceduto da util.js e Int64.js di saelo...

CVE-2020-17136

CVE-2020-17136 CVE-2020-17136 exploit Referências https://bugs.chromium.org/p/project-zero/issues/detail?id=2082&q=CVE-2020-17136 https://github.com/rapid7/metasploit-framework/pull/14585...

ctftool

CTFTOOL Vuoi solo testare l'exploit SYSTEM? Clicca qui. Uno strumento interattivo per l'esplorazione di CTF Questo è ctftool, uno strumento interattivo da riga di comando per sperimentare con CTF, un protocollo poco conosciuto utilizzato su Windows per implementare i servizi di testo. Può essere...

extra_recipe-iOS-10.2

extrarecipe-iOS-10.2 CVE-2017-2370 Code und Exploit von ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 Behoben https://support.apple.com/en-us/HT207482...

CVE-2019-2215

CVE-2019-2215 AVVERTENZA: IL CODICE FORNITO È SOLO A SCOPO EDUCATIVO E DIMOSTRATIVO. NON SOSTENGO NÉ MI ASSUMO ALCUNA RESPONSABILITÀ PER CHIUNQUE UTILIZZI QUESTO CODICE O LE INFORMAZIONI IN ESSO CONTENUTE, O LA SUA COSTRUZIONE, O QUALSIASI COSA IN QUESTO REPOSITORY PER SCOPI ILLEGALI O IMMORALI...

CVE-2021-30551

CVE-2021-30551 Meu exploit para o Chrome V8 CVE-2021-30551 Você pode encontrar a versão do seu Chrome em chrome://version ou acesse http://whatsmyuseragent.org/ Você pode configurar um servidor web localmente usando Python como: root@kitploit: python3 -m http.server 8080 E teste acessando...

CVE-2021-26415

PoC PoC rapido per CVE-2021-26415 come descritto su https://www.cloaked.pl/2021/04/cve-2021-26415/ L'eseguibile BaitAndSwitch.exe è compilato da https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

CVE-2018-8353-POC

CVE-2018-8353 POC Semplice POC di CVE-2018-8353 Use After Free del motore di scripting Microsoft Fonte : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

0days-in-the-wild

0-day sfruttati in-the-wild Questo repository è un riferimento di documenti riguardanti le vulnerabilità 0-day rilevate come sfruttate in-the-wild. Include sia analisi delle cause profonde RCA per ogni exploit 0-day sia una tabella che traccia ogni 0-day. Questi documenti sono destinati a essere...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

Important: libheif

Issue Overview: A critical heap-based buffer overflow vulnerability exists in libheif v1.21.2 and likely earlier versions within the handling of uncompressed HEIF images ISO/IEC 23001-17, unci item type. When processing a tiled image with chroma subsampling e.g., 4:2:0 or 4:2:2, the library fails...

RAVEN: Retrieval-Augmented Vulnerability Exploration Network for Memory Corruption Analysis in User Code and Binary Programs

Large Language Models LLMs have demonstrated remarkable capabilities across various cybersecurity tasks, including vulnerability classification, detection, and patching. However, their potential in automated vulnerability report documentation and analysis remains underexplored. We present RAVEN...

Welcome to the new Project Zero Blog

Posted by Natalie Silvanovich While on Project Zero, we aim for our research to be leading-edge, our blog design was … not so much. We welcome readers to our shiny new blog! For the occasion, we asked members of Project Zero to dust off old blog posts that never quite saw the light of day. And...

CVE-2016-9904

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2017-5378

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...