CVE-2025-14174-Poc

CVE-2025-14174 PoCエクスプロイト 概要 このリポジトリには、ANGLEグラフィックスエンジンにおける深刻なメモリ破損の脆弱性であるCVE-2025-14174（別名EUVD-2025-203113）に対する完全に機能する概念実証（PoC）エクスプロイトが含まれています。この欠陥は、メモリバッファの境界内での操作の不適切な制限（CWE-119）に起因し、特別に細工されたWebコンテンツを介して境界外メモリアクセスを可能にします。 このエクスプロイトはWebブラウザを対象としており、主にiOSデバイス（iOS...

what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ 시스템 분석 도구 // 브라우저 지문 데모 What You Reveal 은 브라우저가 웹사이트에 노출하는 정보를 정확히 보여주기 위해 설계된 개인정보 분석 도구입니다. 레트로 터미널 미학과 투명성에 초점을 맞춘 강력한 메트릭을 특징으로 합니다. 설치 root@kitploit: 저장소 클론 git clone...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit 漏洞检测器（PoC） 此概念验证用于检测基于 WebKit 的浏览器是否易受 CVE‑2025‑24201 影响，这是一个由 WebGL 实现中不正确的功能验证导致的高严重性越界写入漏洞 。 🔍 漏洞摘要 当 WebGLRenderingContext（WebGL 1）允许启用常量 PRIMITIVERESTARTFIXEDINDEX（0x8D69）——一个仅在 WebGL 2 中有效的功能——而不产生 GLINVALIDOPERATION 或 GLINVALIDENUM 错误时，就会触发 CVE‑2025‑24201。...

Astra Linux – Vulnerability in Thunderbird

A use-after-free in WebGL extensions could lead to a potentially exploitable crash. This vulnerability affects Firefox 107, Firefox ESR 102.6, and Thunderbird 102.6...

Astra Linux – Vulnerability in Firefox and Thunderbird

Sandbox escape due to incorrect boundary conditions in the Graphics:CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

CVE-2022-22629

CVE-2022-22629 概念验证 本文是关于在 Safari 15.4 安全更新中修复的 WebGL 漏洞的概念验证。 如果你想详细了解 WebGL 的工作原理，可以使用以下官方资源，因为我们将在这里讨论漏洞的具体细节： https://webglfundamentals.org/webgl/lessons/webgl-how-it-works.html 此概念验证并非关于如何利用原始体来利用此漏洞，我们只讨论漏洞分析和如何使 Web 内容崩溃 : 介绍 WebGL 是一种 JavaScript API，用于在浏览器中渲染 2D 和 3D 图形。它使用 ANGLE 组件作为其主要...

CVE-2026-9999-exploit

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC 探索ハーネス（macOS） 1. 脆弱性の概要...

CVE-2022-26717-Safari-WebGL-Exploit

Safari WebGL XFB Use After Free の脆弱性 root@kitploit: - CVE-2022-26717 クレジット root@kitploit: - Jeonghoon Shin（@singi21a）（Theori所属） パッチとアップデート root@kitploit: - https://support.apple.com/en-us/HT213260...

CVE-2026-87650

A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox,...

CVE-2026-87527

A flaw was found in the WebGL component of Chromium-based browsers. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be triggered by a specially crafted HTML page, potentially leading to a complete compromise...

CVE-2026-87488

A flaw was found in chromium-browser. A use-after-free vulnerability in WebGL, a web graphics library, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-87464

A flaw was found in WebGL within Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a critical security compromise...

CVE-2026-87438

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-84352

A flaw was found in Google Chrome's WebGL component on Android. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js 33-레이어 WebGL 페이로드 이 JavaScript 페이로드는 \alpha 상수를 사용하여 고주파 "메모리 떨림"을 생성합니다. WebKit 가비지 컬렉터와 GPU의 Metal 명령 버퍼 간의 동기화를 해제하여 CVE-2025-43529의 Use-After-FreeUAF를 유발합니다. 🍎 CTT-Apple-Silicon-Refraction WebKit/ANGLE 제로데이 "태그가 주소를 보호하고, CTT가 시간을 제어한다." CVE-ID...

CVE-2026-87438

Out of bounds write in WebGL in Google Chrome on on Android prior to 1...

CVE-2026-87488

Use after free in WebGL in Google Chrome on on Android prior to 153.0...

CVE-2026-87527

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allow...

CVE-2026-87464

Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowe...

CVE-2026-87650

Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 al...