CVE-2026-10702

CVE-2026-10702 JavaScript 引擎（JIT 组件）中的 JIT 错误编译问题。此漏洞已在 Firefox 151.0.3 中修复。 捐赠 通过 PayPal 或扫描下方二维码支持本项目的维护。 ⚡ 简单用法 请仅在安全且经过授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 经授权的渗透测试环境 示例设置： git clone cd 示例用法： Replace the commands above with your actual project setup steps. 注意： 从其他项目克隆时，你必须运行 curl -fsSL...

CVE-2021-21220

CVE-2021-21220 漏洞利用 从错误的 JIT 行为到远程代码执行 概述 本演示文稿解释了 CVE-2021-21220 的利用过程，这是 Google Chrome 的 V8 JavaScript 引擎 中的一个漏洞，由 JIT 编译器在优化过程中的错误假设引起。 演示涵盖以下内容： V8 如何执行即时（JIT）编译 优化过程中如何出现有符号/无符号类型混淆错误 该错误如何导致越界（OOB）数组原语 攻击者如何利用 OOB 访问泄露地址并实现任意内存写入 WebAssembly（Wasm）如何成为本机代码执行的目标 现有的缓解措施和现代浏览器防御 演示目标 本演示的目标是展示...

rbpf

rbpf 用于 eBPF 的 Rust（用户空间）虚拟机 描述 crate 链接 API 使用示例 构建 eBPF 程序 构建特性 欢迎反馈！ 问题 / 解答 注意事项 待办 列表 许可证 灵感来源 其他资源 描述 此 crate 包含一个用于执行 eBPF 程序的虚拟机。BPF，即 Berkeley Packet Filter （伯克利包过滤器），是一种类似汇编的语言，最初为 BSD 系统开发，目的是使用 tcpdump 等工具在内核中过滤数据包，从而避免向用户空间进行无用的拷贝。它后来被移植到 Linux，并演变为 eBPF（ extended BPF），一个具有更多特性的更快版本。...

cve-2017-7117

cve-2017-7117 关于漏洞 一个类型混淆和 UAF（释放后使用）漏洞，存在于 iOS 10.3.4 及更早版本，以及 Safari 11.0 之前。 CVE-2017-7117：mitre.org 原始概念验证 由 @lokihardt 发现，来源：Google Project Zero function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a number, but JIT treats as String printoi; // whoops f; 运行上述代码会导致...

jitsploitation

jitsploitation 针对 CVE-2020-9802 的 iOS 浏览器利用，这是一个旧版 JIT 漏洞。 这是一个针对 macOS 和 iOS 上 WebKit 引擎中知名 JIT 编译器漏洞的利用程序，该漏洞最初由 Project Zero 记录。 我重新实现了这个漏洞的利用代码，以此作为学习浏览器漏洞利用的练习。 视频讲解：如何通过一次点击破解你的 iPhone 鸣谢 ProjectZero 博客 JakeBlair420 实现...

CVE-2026-92519

A flaw was found in the Linux kernel. When the BPF Just-In-Time JIT compiler processes subprograms, a memory leak can occur. If JIT compilation fails for a subprogram, the bpfjitfree function does not properly free the associated memory for the JIT context offsets array. This can lead to a gradua...

cve-2018-4233

CVE-2018-4233 针对CVE-2018-4233的利用程序，这是WebKit的JIT编译器中的一个bug。已在macOS 10.13.3上的Safari 11.0.3上测试。 更多详情请参见 https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf 该利用程序通过构建addrof和fakeobj原语，然后按照 http://www.phrack.org/papers/attackingjavascriptengines.html 中所述伪造一个typed...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

CVE-2026-103111

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

PT-2026-94617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to rewrite BPF LOAD ACQ instructions to BPF PROBE MEM loads, unlike the behavior for regular BPF LDX...

PT-2026-94827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RISC-V BPF JIT compiler. When bpf int jit compile is called for subprograms, it may return early during the first pass, leaving ctx-offset active for a...

PT-2026-89766

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.48 Description The pcre2 jit match function mishandles a previously copied subject when it is passed in as a context. This behavior can lead to an incorrect free operation, resulting in memory corruption. Memory...

CVE-2026-76044

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...

Linux Distros Unpatched Vulnerability : CVE-2026-74976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...

firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...

CVE-2026-19173 vulnerabilities

Vulnerabilities for packages: chromium...

firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

The vulnerability of the JIT-compiler of Mozilla Firefox allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JIT-compiler of Mozilla Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260723-73-0072

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...