599 matches found
CVE-2019-8601
Exploiting CVE-2019-8601 This is an exploit for a WebKit vulnerability that was originally discovered by Fluoroacetate during the pwn2own competition in Vancouver. While I did not discover this bug, I wrote this exploit to practice my exploit development skills. The original writeup for this...
CVE-2025-43541
CVE-2025-43541 WARNING: POTENTIALLY UNSAFE CODE This repository contains a JavaScript / HTML Proof of Concept PoC related to a potential WebKit / JavaScriptCore vulnerability identified as CVE-2025-43541. Disclaimer This code may be unsafe. Running this HTML file can crash the browser, especially...
uaf-2023-28205
CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability This vulnerability affects Apple WebKit and can be exploited through maliciously crafted web content, potentially allowing arbitrary code execution in the context of the WebKit process. The affected WebKit build analyzed in this repository...
Cassowary-CVE-2024-23222-x86_64
Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...
pwn2own2020
Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities Overview This repository contains exploitation and technical details of our Pwn2Own 2020 winning submission targeting Apple Safari with a kernel escalation of privilege for macOS 10.15.3. For further information, you can...
cve-2017-7117
cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a...
CVE-2025-43529
CVE-2025-43529 Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore. This repository contains a carefully structured root cause analysis slides for this vulnerability, intentionally organized as a tiered explanation to guide...
CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated
🏴☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research 📌 Overview This repository contains a comprehensive technical analysis and deobfuscation research of the Coruna iOS Exploit Kit. The research focuses on documenting how the exploit chain targets CVE-2024-23222 — a high-severity type confusion...
Exploit for Type Confusion in Apple Safari
CVE-2024-23222 PoC - Write-up: https://jamezx32.github.io/...
Exploit for Improper Check for Unusual or Exceptional Conditions in Apple Ipados
CVE-2023-41993 PoC - Write-up: https://jamezx32.github.i...
PT-2026-107674
threatreport HighCompleteness DarkSword/Coruna Open Directory Finding Report | 07-10-2026 Source: https://t.co/CYqnWeWnOw Key details below ↓ 🧑💻Actors/Campaigns: Unc6353 Unc6748 💀Threats: Darksword tool, Coruna tool, Ds fusion, Gooll, Watering hole technique, Plasma, Ghost, Ghostblade, Ghostknife,...
Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 ReduceStrength...
UBUNTU-CVE-2026-74936
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
ANT-2026-K6DHGAYS · webkit · Heap-buffer-overflow
heap-buffer-overflow critical Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-K6DHGAYS: Heap-buffer-overflow in...
CLSA-2026-1777543457 webkit2gtk3: Fix of 9 CVEs
Update to 2.50.6 to fix the following vulnerabilities WSA-2026-0001: - CVE-2025-43213: type confusion in JavaScriptCore fixed in 2.50.5 - CVE-2025-43214: out-of-bounds read in WebCore fixed in 2.50.5 - CVE-2025-43457: integer overflow in WebKit canvas rendering fixed in 2.50.6 - CVE-2025-43511:...
Exploit for Type Confusion in Apple Ipados
🏴☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research !CVEh...
Exploit for Type Confusion in Apple Ipados
🏴☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research !CVEh...
Apple Safari JavaScriptCore FTL New Array Materialization Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the n...