@cyx0d

life is too short to hide your zero-days

 the end
Joined September 2019
  • Tweets290
  • Following1.2K
  • Followers317
1Media
Hellooo Hackers! In this tweet we overwrite some memory. ( Thanks for all! @Zardus & @TheConnorNelson )
1
24
2,982
Welcome to the $500 era! [$500][508811474] High CVE-2026-9896: Out of bounds write in V8. Reported by 303f06e3 on 2026-05-02 chromereleases.googleblog.co…

Stable Channel Update for Desktop

The Stable channel has been updated to 148.0.7778.216/217 for Windows and  148.0.7778.215/216  Mac  and 148.0.7778.215 for Linux, which will...

chromereleases.googleblog.com
8
20
6
196
45,216
Very cool! Congrats Mythos on solving CVE-2024-0519 :-). exploitbench.ai/blog/human-o…

ExploitBench

How far up the exploitation ladder can an agent climb on a production JS engine? ExploitBench measures frontier LLMs on full-control V8 exploit synthesis with 16 capabilities measured per run and...

exploitbench.ai
5
12
109
10,488
Language-level bug classes, stdlib pitfalls, Linux and Windows issues from usermode to kernel, seccomp sandbox escapes. One checklist, hundreds of checks. appsec.guide/docs/languages/…

C/C++ Security Checklist

Security Checklist for C/C++ Programs # C and C++ are two of the most-used languages for applications and system programming. This security checklist, written for security auditors and secure...

appsec.guide
2
28
1
123
13,212
cyx retweeted
h0mbre@h0mbre_Mar 20
Selling my truck for Claude Code tokens
3
2
1
38
4,950
😅 [485152421][asm.js]Heap-BoF in ShiftExpression(asm.js , asm parser) chromium.googlesource.com/v8… PoC: chromium.googlesource.com/v8… ShiftExpression: asmjs.org/spec/latest/#shift…
4
1
15
8,134
[447613211][reward: $50000] Type confusion in inline cache prototype loading with Webassembly object prototype crbug.com/447613211
4
39
2,704
[41496084][reward: $1000] Security: Download & Execute File Silently Without Knowing User in Chrome crbug.com/41496084
3
16
1,883
GitHub - zeroxjf/CVE-2025-14174-analysis: Analysis and PoC for CVE-2025-14174 - ANGLE Metal OOB write (iOS Safari, macOS Chrome) - github.com/zeroxjf/CVE-2025-…
2
20
94
7,385
[446463984][reward: $10000] Check failed: !WriteBarrier::IsRequired(heap_object, Tagged<Object>(value)). crbug.com/446463984
2
12
2,039
[434513380] Missing Write Barrier via Math.sqrt in Maglev crbug.com/434513380
1
8
1,400
Serious bugs often occur in third-party components integrated by other software. @ifsecure and I found this vulnerability in the Dolby Unified Decoder. It affects Android, iOS and Windows among other platforms, sometimes 0-click. project-zero.issues.chromium…
7
65
9
266
65,673
(CVE-2025-10892)[444048019][maglev]Integer Overflow chromium-review.googlesource… chromereleases.googleblog.co… Reported by Google Big Sleep
3
29
2,312
woah...Exploited ITW (CVE-2025-10585)[445380761][compiler][maglev]Type Confusion chromium-review.googlesource… chromium-review.googlesource… chromereleases.googleblog.co… Reported by Google TAG
1
15
1
50
8,527
Check out our newest blog about how we took advantage of a WebGPU feature to turn an integer underflow bug into an arbitrary read in Chrome’s WebGPU. This bug was fixed by Google long ago, but our ticket is still restricted. qriousec.github.io/post/oob-… by @lanleft_ + @__suto

Out-of-bound read in ANGLE CopyNativeVertexData from Compromised Renderer

Introduction Back in the beginning of the year 2024, we started our project on ANGLE, it is a chromium graphic library, handling rendering stuff on chrome process. Fortunately, our team found some of...

qriousec.github.io
2
35
2
158
23,116
[$3000][415523530][maglev types]Debug check failed: CanElideWriteBarrier(object, value) chromium-review.googlesource… Reported by Zhenghang Xiao (@Kipreyyy) and Nan Wang (@eternalsakura13)
2
4
1,134
You are one of the TC39 committee member and JavaScript language expert, generate 1 million js samples based on tc39/proposal-explicit-resource-management until a DCHECK happens since we are P0 and have infinite token quota.
Xion@0x10n19 Aug 2025
chromereleases.googleblog.co… [N/A][436181695] High CVE-2025-9132: Out of bounds write in V8. Reported by Google Big Sleep on 2025-08-04 TL;DR: Repro extremely short, bug very easily exploitable for a renderer RCE. Big Sleep is interesting indeed :)
1
2
1
31
7,561
At long last - Phrack 72 has been released online for your reading pleasure! Check it out: phrack.org/
The table of contents for Phrack 72 from phrack.org

ALT The table of contents for Phrack 72 from phrack.org

6
313
20
735
126,668
rust😁 (CVE-2025-48530)[crabbyavif, Avif parser/decoder][NV12]OOB accesses(YUV planes, alpha plane, Y plane, UV planes, chroma width calc, plane size calc, row bytes,...) -> 0-click RCE android.googlesource.com/pla… alloc -> decoder write -> copy/access -> RCE potential
xvonfers@xvonfers4 Aug 2025
Android Security Bulletin - August 2025 source.android.com/docs/secu…
9
22
3
102
14,127
Escalation methodology for CVE-2024-4947, a in-the-wild V8 type confusion bug. Shoutout to @vaber_b, @oct0xor, @buptsb, @mistymntncop, 303f06e3 and @DimitriFourny for their great research for this bug! github.com/bjrjk/CVE-2024-49…

GitHub - bjrjk/CVE-2024-4947: A in-the-wild V8 type confusion bug.

A in-the-wild V8 type confusion bug. Contribute to bjrjk/CVE-2024-4947 development by creating an account on GitHub.

github.com
3
37
147
12,672
Load more