Lucene search
+L

564 matches found

Kitploit
Kitploit
added 2026/09/13 7:40 a.m.9 views

CVE-2025-43529

CVE-2025-43529 Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore. This repository contains a carefully structured root cause analysis slides for this vulnerability, intentionally organized as a tiered explanation to guide...

8.8CVSS8AI score0.08763EPSS
SaveExploits8References2
Kitploit
Kitploit
added 2026/09/13 2:50 a.m.6 views

CVE-2025-43541

CVE-2025-43541 WARNING: POTENTIALLY UNSAFE CODE This repository contains a JavaScript / HTML Proof of Concept PoC related to a potential WebKit / JavaScriptCore vulnerability identified as CVE-2025-43541. Disclaimer This code may be unsafe. Running this HTML file can crash the browser, especially...

4.3CVSS6.2AI score0.3414EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:37 a.m.6 views

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

🏴‍☠️ Coruna iOS Exploit Kit: Investigación de CVE-2024-23222 📌 Resumen Este repositorio contiene un análisis técnico completo y una investigación de desofuscación del Coruna iOS Exploit Kit. La investigación se centra en documentar cómo la cadena de explotación apunta a CVE-2024-23222 — una...

8.8CVSS8.1AI score0.10593EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/11 5:48 p.m.4 views

CVE-2019-8601

Explotando CVE-2019-8601 Este es un exploit para una vulnerabilidad de WebKit que fue descubierta originalmente por Fluoroacetate durante la competencia pwn2own en Vancouver. Aunque no descubrí este error, escribí este exploit para practicar mis habilidades de desarrollo de exploits. El artículo...

8.8CVSS7.5AI score0.04053EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 2:36 a.m.5 views

pwn2own2018

Pwn2Own 2018: Safari + macOS Safari RCE, sandbox escape, and LPE to kernel for macOS 10.13.3. Usage Install nasm and tornado: root@kitploit: brew install nasm pip3 install tornado Check config.py if you want to change the host or ports. Afterwards start the server with ./server.py and navigate to...

6.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 9:19 p.m.6 views

cve-2017-7117

cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero root@kitploit: function f let o = ; for let i in xx: 0 // i is a String for i of 0 // ...

8.8CVSS8AI score0.10196EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/08 7:06 a.m.5 views

uaf-2023-28205

CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability This vulnerability affects Apple WebKit and can be exploited through maliciously crafted web content, potentially allowing arbitrary code execution in the context of the WebKit process. The affected WebKit build analyzed in this repository...

8.8CVSS7.9AI score0.27076EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:25 a.m.5 views

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

8.8CVSS7.8AI score0.10593EPSS
SaveExploits6
OSV
OSV
added 2026/08/18 1:17 p.m.6 views

UBUNTU-CVE-2026-74936

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

9.8CVSS5.9AI score0.00403EPSS
SaveExploits1References5
Anthropic
Anthropic
added 2026/08/17 8:03 p.m.12 views

ANT-2026-K6DHGAYS · webkit · Heap-buffer-overflow

heap-buffer-overflow critical Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-K6DHGAYS: Heap-buffer-overflow in...

6.1AI score
SaveExploits0References1
OSV
OSV
added 2026/04/30 10:10 a.m.20 views

CLSA-2026-1777543457 webkit2gtk3: Fix of 9 CVEs

Update to 2.50.6 to fix the following vulnerabilities WSA-2026-0001: - CVE-2025-43213: type confusion in JavaScriptCore fixed in 2.50.5 - CVE-2025-43214: out-of-bounds read in WebCore fixed in 2.50.5 - CVE-2025-43457: integer overflow in WebKit canvas rendering fixed in 2.50.6 - CVE-2025-43511:...

8.8CVSS5.9AI score0.00996EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/10 5:49 a.m.236 views

Exploit for Type Confusion in Apple Ipados

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research !CVEh...

8.8CVSS5.9AI score0.10593EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2026/03/10 5:49 a.m.239 views

Exploit for Type Confusion in Apple Ipados

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research !CVEh...

8.8CVSS6AI score0.10593EPSS
SaveExploits6
Zero Day Initiative
Zero Day Initiative
added 2026/02/03 12:00 a.m.15 views

Apple Safari JavaScriptCore FTL New Array Materialization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the n...

8.8CVSS6AI score0.00376EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/02/01 11:36 a.m.344 views

Exploit for Use After Free in Apple Safari

CVE-2025-43529 Root Cause Analysis for CVE-2025-43529, a UAF...

8.8CVSS7.3AI score0.08763EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2026/01/05 11:43 p.m.879 views

Exploit for Use After Free in Apple Safari

CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and...

8.8CVSS7.9AI score0.08763EPSS
SaveExploits8
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:00 a.m.16 views

Apple Safari JavaScriptCore HashTable Expansion Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS7AI score0.00773EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/12/04 5:15 p.m.15 views

CVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

8.8CVSS7.1AI score0.00473EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2025/11/25 8:15 a.m.15 views

CVE-2025-13502

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...

7.5CVSS7.1AI score0.00583EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2025/11/13 12:00 a.m.13 views

Apple Safari JavaScriptCore operationMapIteratorNext Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

4.3CVSS5.8AI score0.01038EPSS
SaveExploits0References1
Rows per page
Query Builder