CVE-2021-26415

PoC Quick PoC for CVE-2021-26415 as described on https://www.cloaked.pl/2021/04/cve-2021-26415/ The BaitAndSwitch.exe is compiled from https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

CVE-2018-8353-POC

CVE-2018-8353 POC Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free saurce : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

CVE-2019-2215

CVE-2019-2215 Copy and pasted from: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ https://github.com/grant-h/qu1ckr00t/blob/master/native/poc.c...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

jscpwn

CVE-2016-4622 PoC exploit for CVE-2016-4622. Find a detailed writeup of the bug on phrack...

ctftool

CTFTOOL ¿Solo quieres probar el exploit SYSTEM? Haz clic aquí. Una herramienta interactiva de exploración de CTF Esto es ctftool, una herramienta interactiva de línea de comandos para experimentar con CTF, un protocolo poco conocido utilizado en Windows para implementar servicios de texto. Esto...

CVE-2021-30551

CVE-2021-30551 My exp for chrome V8 CVE-2021-30551 You can found your chrome version by chrome://version or go to http://whatsmyuseragent.org/ You can set up a webserver locally using python like: python3 -m http.server 8080 And the test it by accessing http://127.0.0.1:8080 reference google...

CVEREV3

CVEREV3 Testing CVE-2021-30858 Rev3 original post : https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30858.html...

0days-in-the-wild

0-days, эксплуатируемые в дикой природе Этот репозиторий содержит справочные документы об уязвимостях нулевого дня 0-day, обнаруженных как эксплуатируемые в дикой природе in-the-wild. Он включает как анализ первопричин RCA для каждого эксплойта нулевого дня, так и таблицу отслеживания каждого...

How to fix a bug in a fix

Posted by Natalie Silvanovich Project Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are...

CVE-2019-2215

CVE-2019-2215 DISCLAIMER: THE CODE PROVIDED HERE IS FOR EDUCATIONAL AND SHOWCASING PURPOSE ONLY. I DO NOT SUPPORT, NOR TAKE ANY RESPONSIBILITY FOR ANYONE THAT USES THIS CODE OR THE INFORMATION IN IT, OR ITS BUILD, OR ANYTHING IN THIS REPOSITORY FOR ILLEGAL OR IMMORAL REASONS Credits Based on a...

CVE-2020-17136

CVE-2020-17136 CVE-2020-17136 exploit References https://bugs.chromium.org/p/project-zero/issues/detail?id=2082&q=CVE-2020-17136 https://github.com/rapid7/metasploit-framework/pull/14585...

extra_recipe-iOS-10.2

extrarecipe-iOS-10.2 CVE-2017-2370 Code & Exploit by ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 Fixed https://support.apple.com/en-us/HT207482...

cve-2019-2215

CVE-2019-2215 Project Zero bug 1942...

cve-2019-2215-3.18

cve2019-2215-3.18 poc для ядра 3.18 Основано на POC Мэдди Стоун из https://bugs.chromium.org/p/project-zero/issues/detail?id=1942...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free in Safari Infoleak Exploit - leak an address of a JSObject Tested on webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Original PoC by Google Project Zero:...

Important: libheif

Issue Overview: A critical heap-based buffer overflow vulnerability exists in libheif v1.21.2 and likely earlier versions within the handling of uncompressed HEIF images ISO/IEC 23001-17, unci item type. When processing a tiled image with chroma subsampling e.g., 4:2:0 or 4:2:2, the library fails...

RAVEN: Retrieval-Augmented Vulnerability Exploration Network for Memory Corruption Analysis in User Code and Binary Programs

Large Language Models LLMs have demonstrated remarkable capabilities across various cybersecurity tasks, including vulnerability classification, detection, and patching. However, their potential in automated vulnerability report documentation and analysis remains underexplored. We present RAVEN...

Welcome to the new Project Zero Blog

Posted by Natalie Silvanovich While on Project Zero, we aim for our research to be leading-edge, our blog design was … not so much. We welcome readers to our shiny new blog! For the occasion, we asked members of Project Zero to dust off old blog posts that never quite saw the light of day. And...

CVE-2016-9904

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...