0days-in-the-wild

0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...

CVE-2019-2215

CVE-2019-2215 免责声明：此处提供的代码仅供教育和展示目的。我不支持，也不对任何将此代码（或其信息、其构建、或本仓库中的任何内容）用于非法或不道德目的的人承担责任 致谢 基于 Google Project Zero 的 Jann Horn 和 Maddie Stone 的概念验证 特别感谢 CloudFuzz 的工作坊，让我能够编写此漏洞利用程序。 另外感谢 kangtastic 提供了另一个参考来源。 使用方法 要构建漏洞利用程序： root@kitploit: NDKROOT=/Android/Sdk/ndk/22.0.7026061 make...

CVE-2021-26415

PoC PoC rápido para CVE-2021-26415 como se describe en https://www.cloaked.pl/2021/04/cve-2021-26415/ El BaitAndSwitch.exe está compilado desde https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

cve-2019-11707

SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/p/project-zero/issues/detail?id=1820 截图 文件 exploit.js - 实际利用代码，附加了saelo的util.js和Int64.js。 stager.js - 用于创建常量，附加了saelo的util.js和Int64.js。 stager.py - 使用keystone汇编指令。输出提供给。...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

ctftool

CTFTOOL 只想测试 SYSTEM 漏洞？点击这里。 交互式 CTF 探索工具 这是 ctftool，一个用于试验 CTF（一种在 Windows 上实现文本服务的小众协议）的交互式命令行工具。它可能对研究 Windows 内部机制、调试文本输入处理器的复杂问题以及分析 Windows 安全性有所帮助。 可以使用 ctftool 编写简单脚本，以自动化与 CTF 客户端或服务器的交互，或执行简单的模糊测试。 背景 随此工具发布附带一篇博客文章，可在此处获取。...

CVEREV3

CVEREV3 Probando CVE-2021-30858 Rev3 publicación original: https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30858.html...

CVE-2021-30551

CVE-2021-30551 Mi exploit para Chrome V8 CVE-2021-30551 Puedes encontrar la versión de tu Chrome mediante chrome://version o visita http://whatsmyuseragent.org/ Puedes configurar un servidor web localmente usando python como: root@kitploit: python3 -m http.server 8080 Y probarlo accediendo a...

CVE-2020-17136

CVE-2020-17136 Exploit de CVE-2020-17136 Referencias https://bugs.chromium.org/p/project-zero/issues/detail?id=2082&q=CVE-2020-17136 https://github.com/rapid7/metasploit-framework/pull/14585...

extra_recipe-iOS-10.2

extrarecipe-iOS-10.2 CVE-2017-2370 代码与利用工具由 ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 已修复 https://support.apple.com/en-us/HT207482...

cve-2019-2215

CVE-2019-2215 Project Zero bug 1942...

cve-2019-2215-3.18

cve2019-2215-3.18 cve2019-2215 PoC para el kernel 3.18 Basado en el PoC de Maddie Stone de https://bugs.chromium.org/p/project-zero/issues/detail?id=1942...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free en Safari Exploit de fuga de información: filtra una dirección de un JSObject Probado en webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz PoC original por Google Project Zero:...

CVE-2018-8353-POC

CVE-2018-8353 POC Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free saurce : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

CVE-2019-2215

CVE-2019-2215 复制粘贴自： https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ https://github.com/grant-h/qu1ckr00t/blob/master/native/poc.c...

Important: libheif

Issue Overview: A critical heap-based buffer overflow vulnerability exists in libheif v1.21.2 and likely earlier versions within the handling of uncompressed HEIF images ISO/IEC 23001-17, unci item type. When processing a tiled image with chroma subsampling e.g., 4:2:0 or 4:2:2, the library fails...

RAVEN: Retrieval-Augmented Vulnerability Exploration Network for Memory Corruption Analysis in User Code and Binary Programs

Large Language Models LLMs have demonstrated remarkable capabilities across various cybersecurity tasks, including vulnerability classification, detection, and patching. However, their potential in automated vulnerability report documentation and analysis remains underexplored. We present RAVEN...

Welcome to the new Project Zero Blog

Posted by Natalie Silvanovich While on Project Zero, we aim for our research to be leading-edge, our blog design was … not so much. We welcome readers to our shiny new blog! For the occasion, we asked members of Project Zero to dust off old blog posts that never quite saw the light of day. And...

CVE-2016-9904

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...

CVE-2017-5378

creationtimestamp| type| source ---|---|--- 2025-09-26 05:00:00+00:00| seen| https://projectzero.google/2025/09/pointer-leaks-through-pointer-keyed.html 2025-09-26 15:00:00+00:00| seen| https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html...