CVE-2021-26415

PoC CVE-2021-26415에 대한 빠른 PoC입니다. https://www.cloaked.pl/2021/04/cve-2021-26415/ 에서 설명한 대로. BaitAndSwitch.exe는 https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch 에서 컴파일되었습니다...

0days-in-the-wild

0-days, эксплуатируемые в дикой природе Этот репозиторий содержит справочные документы об уязвимостях нулевого дня 0-day, обнаруженных как эксплуатируемые в дикой природе in-the-wild. Он включает как анализ первопричин RCA для каждого эксплойта нулевого дня, так и таблицу отслеживания каждого...

ctftool

CTFTOOL Vous voulez simplement tester l'exploit SYSTEM ? Cliquez ici. Un outil interactif d'exploration CTF Voici ctftool, un outil interactif en ligne de commande pour expérimenter avec CTF, un protocole peu connu utilisé sur Windows pour implémenter les services de texte. Cela peut être utile...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

CVE-2021-30551

CVE-2021-30551 Mon exp pour Chrome V8 CVE-2021-30551 Vous pouvez trouver votre version de Chrome via chrome://version ou aller sur http://whatsmyuseragent.org/ Vous pouvez configurer un serveur web localement avec python comme ceci : python3 -m http.server 8080 Et le tester en accédant à...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free dans Safari Exploit Infoleak - fuite d'une adresse d'un JSObject Testé sur webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz PoC d'origine par Google Project Zero:...

CVE-2016-9904

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2017-5378

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2020-1378

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

CVE-2018-0900

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

CVE-2020-1377

creationtimestamp| type| source ---|---|--- 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen| https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2024-0582 Exploit PoC This repository provides a Proof-...

CVE-2015-0073

creationtimestamp| type| source ---|---|--- 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:53+00:00| seen|...

The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

Posted by Seth Jenkins, Google Project Zero This blog post provides a technical analysis of exploit artifacts provided to us by Google's Threat Analysis Group TAG from Amnesty International. Amnesty’s report on these exploits is available here. Thanks to both Amnesty International and Google's...

CVE-2024-49114

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 20:52:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113630508328834714 2025-01-07 05:40:37+00:00| seen|...

CVE-2024-43641

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471740904819107 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-43452

creationtimestamp| type| source ---|---|--- 2024-11-12 18:10:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113471327527148804 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-12-19 18:03:00+00:00| seen|...

Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...

CVE-2024-43047

creationtimestamp| type| source ---|---|--- 2024-10-07 13:12:47+00:00| seen| https://t.me/CyberBulletin/26001 2024-10-07 13:12:47+00:00| seen| https://t.me/CyberBulletin/1091 2024-10-07 15:57:40+00:00| seen| https://t.me/cvedetector/7216 2024-10-08 06:10:25+00:00| exploited|...