what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ 系统分析工具 // 浏览器指纹演示 你所泄露的信息 是一款隐私分析工具，旨在准确展示你的浏览器向网站暴露了哪些信息。它采用复古终端美学设计，并提供基于透明度的可靠指标。 安装 克隆仓库 git clone https://github.com/saatvik333/what-you-reveal.git 安装依赖 bun install 启动开发服务...

CVE-2025-14174-Poc

CVE-2025-14174 PoC 漏洞利用程序 概述 本仓库包含一个功能完整的 CVE-2025-14174（也记为 EUVD-2025-203113）概念验证（PoC）漏洞利用程序，该漏洞是 ANGLE 图形引擎中的一个严重内存损坏漏洞。其根本原因在于对内存缓冲区边界内操作的限制不当（CWE-119），使得通过特制的网页内容能够进行越界内存访问。 该漏洞利用程序针对网络浏览器，主要聚焦于 iOS 设备（最高至 iOS 26），但已在多种使用 ANGLE 的平台上测试并确认有效，包括基于 Chrome、Edge 和 Safari 的 Android、Windows 和 macOS...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit 漏洞检测器（PoC） 此概念验证用于检测基于 WebKit 的浏览器是否易受 CVE‑2025‑24201 影响，这是一个由 WebGL 实现中不正确的功能验证导致的高严重性越界写入漏洞 。 🔍 漏洞摘要 当 WebGLRenderingContext（WebGL 1）允许启用常量 PRIMITIVERESTARTFIXEDINDEX（0x8D69）——一个仅在 WebGL 2 中有效的功能——而不产生 GLINVALIDOPERATION 或 GLINVALIDENUM 错误时，就会触发 CVE‑2025‑24201。...

CVE-2022-22629

CVE-2022-22629 概念验证 本文是关于在 Safari 15.4 安全更新中修复的 WebGL 漏洞的概念验证。 如果你想详细了解 WebGL 的工作原理，可以使用以下官方资源，因为我们将在这里讨论漏洞的具体细节： https://webglfundamentals.org/webgl/lessons/webgl-how-it-works.html 此概念验证并非关于如何利用原始体来利用此漏洞，我们只讨论漏洞分析和如何使 Web 内容崩溃 : 介绍 WebGL 是一种 JavaScript API，用于在浏览器中渲染 2D 和 3D 图形。它使用 ANGLE 组件作为其主要...

CVE-2026-9999-exploit

CVE-2026-9999 — Harness de búsqueda de PoC para WebGL ANGLE/Metal de Chrome macOS 1. Resumen de la vulnerabilidad Campo| Valor ---|--- CVE| CVE-2026-9999 Proveedor / producto| Google Chrome Afectado| Chrome 148.0.7778.216, solo macOS 1 Corregido en| 148.0.7778.216 1 Impacto| Ejecución arbitraria...

CVE-2022-26717-Safari-WebGL-Exploit

Safari WebGL XFB 释放后使用漏洞 - CVE-2022-26717 致谢 - Jeonghoon Shin@singi21a 来自 Theori 补丁与更新 - https://support.apple.com/en-us/HT213260...

CVE-2026-103628

A flaw was found in the WebGL Web Graphics Library component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Successful exploitation enables an...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103628

A critical out-of-bounds write vulnerability exists in the WebGL component of Google Chrome (prior to version 154.0.8037.97 ). This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Successful exploi...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-91706

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload ​这个JavaScript有效载荷使用 \alpha 常量来创建一个高频的"Memory Shiver"。它通过在WebKit垃圾回收器与GPU的Metal命令缓冲区之间制造不同步，触发CVE-2025-43529中的Use-After-Free（UAF）漏洞。 🍎 CTT-Apple-Silicon-Refraction WebKit/ANGLE 零日 "标签保护地址；CTT控制时间。" CVE-ID: CVE-2025-14174...

CVE-2026-95349

A flaw was found in chromium-browser. A buffer overflow vulnerability in the WebGL Web Graphics Library component allows a remote attacker to execute arbitrary code outside the browser sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can corrupt memory and...

Chromium CVE-2026-87488: Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87464: Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87438: Out of bounds write in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93372: Buffer overflow in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Stable Channel Update for Desktop

The Stable channel has been updated to 154.0.8037.97/.98 for Windows and Mac and 154.0.8037.97 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...