
cve-2019-13720
Proof-of-concept exploit for CVE-2019-13720, a Chrome browser vulnerability. Includes a demonstration video and a released exploitation tool for…

Proof-of-concept exploit for CVE-2019-13720, a Chrome browser vulnerability. Includes a demonstration video and a released exploitation tool for…

Passive recon & attack surface mapper — zero requests sent

my exp for chrome V8 CVE-2021-30551

Reproduction case for CVE-2023-4357, a Chrome XXE vulnerability enabling arbitrary file read, with proof-of-concept files and a hosted test page.

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

Full-chain RCE exploit for CVE-2025-2783, a Chromium Ipcz sandbox escape vulnerability. Implements thread hijacking, V8 hooks, and shellcode…


POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox

Proof-of-concept exploit for CVE-2026-4447, a V8 RCE in Google Chrome prior to 146.0.7680.153, allowing arbitrary code execution via crafted HTML…

Google Chrome Use After Free

Chained Chrome V8 renderer escape proof-of-concept exploiting four CVEs: Float64Array corruption, Wasm overwrite, popup navigation retargeting, and…

Proof-of-concept trigger for CVE-2026-85045, a Chrome V8 Maglev deoptimization bug causing incorrect array output on vulnerable builds.

Root-cause analysis and working exploit for CVE-2026-78938, a V8 TurboFan type confusion leading to arbitrary read/write within the compressed heap.…

Chrome extension and Express server that exploits keylogging abilities of CSS.

Proof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.

Curated proof-of-concept exploits for real-world CVEs affecting iOS, macOS, Chrome Renderer, and Steam clients, with version-specific targets and…

Chrome V8 n-day exploits that I've written.

Chrome v8 1Day Exploit by István Kurucsai