Browser-Pwning-

Browser-Pwning chrome pwning & v8 pwning을 시작하기 위한 잘 구조화된 문서 문서 구조 이 문서가 어떻게 구성되어 있는지 1. 동기 2. 실제 학습 자료 동기 브라우저는 오늘날 가장 많이 사용되는 기술 중 하나입니다. 모든 기성 컴퓨터에서 플러그 앤 플레이만 하면 브라우저가 설치되어 있는 것을 볼 수 있습니다. 그렇기 때문에 공격자 관점과 위협 모델 관점에서 공격자가 악성 페이지를 통해 브라우저를 손상시킬 수 있다면 매우 보람 있는 일입니다. 이러한 근거로 저는 Google의 Javascript...

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc d8을 명령줄로 실행: ./d8 2.mjs...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 ゼロデイメモリ破損の脆弱性 🔥 活発に悪用されているゼロデイ ⚡ V8 エンジンのメモリ破損 🛡️ 直ちにパッチを適用 📖 概要 ⚠️ CVE-2026-11645 は、Google Chrome V8 JavaScript エンジンに影響を与える深刻度の高いゼロデイ脆弱性です。この欠陥により、攻撃者は範囲外読み取り/書き込み Out-of-Bounds Read/Write 状態を引き起こし、リモートコード実行 RCE に至る可能性があります。 🎯 脆弱性情報 🧠 技術概要 この脆弱性は Chrome の V8...

CVE-2024-12381

CVE-2024-12381 CVE-2024-12381 は、Chrome の V8 エンジンにおける WebAssembly 型正規化の脆弱性で、CanonicalEquality::EqualValueType がインデックス付き参照型の null 許容性を考慮しないことに起因します。JSPI ベースの V8 サンドボックス回避（CVE-2024-12692）と組み合わせることで、リモートコード実行が可能になります。 サーバーは User-Agent から Chrome...

exploitBenchSkill

OpenSec ExploitBench V8 PoC Skill An installable Pi and Agent...

vulnerabilities present in Google Chrome

Google has identified several vulnerabilities in Google Chrome, particularly in versions for 152.0.7977.82. These vulnerabilities reside in various components of Google Chrome, including DevTools, Network, V8 JavaScript engine, and Transactions Platform on iOS. Attackers can exploit these...

GHSA-8PJ6-X3R7-FGX3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2FJV-4HM5-6J23 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-P67G-9RGF-JJH6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9QGH-MJ3F-5GW3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C76R-4QFW-4W98 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-994M-HVJJ-RV2C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FV55-2P8J-MHM4 vulnerabilities

Vulnerabilities for packages: chromium...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

CVE-2026-85045

CVE-2026-85045 is a race condition in V8 , the JavaScript engine used in Google Chrome and other Chromium-based browsers, affecting versions prior to 152.0.7977.82 . A remote attacker can execute arbitrary code inside the sandbox by tricking a user into visiting a crafted HTML page (user interact...

CVE-2026-85045

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-70702

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-85234

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

VulnCheck KEV: CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...