SorryMybad @S0rryMybad

Sorry Joined July 2015

Tweets

776
Followers

14K
Following

278
Likes

473

Xion @0x10n

2 weeks ago

chromereleases.googleblog.com/2025/08/stable… [N/A][436181695] High CVE-2025-9132: Out of bounds write in V8. Reported by Google Big Sleep on 2025-08-04 TL;DR: Repro extremely short, bug very easily exploitable for a renderer RCE. Big Sleep is interesting indeed :)

2 32 161 17K 60

k0shl @KeyZ3r0

a year ago

Excited to be nominated for the Best RCE of 2024 Pwnie Awards🥰.

Pwnie Awards @PwnieAwards

a year ago

Excited to be nominated for the Best RCE of 2024 Pwnie Awards🥰.

9 74 211 157K 30

4 4 65 21K 9

Man Yue Mo @mmolgtm

a year ago

In this post I'll use CVE-2024-3833, a type confusion in v8 to gain remote code execution in the Chrome renderer sandbox: github.blog/2024-06-26-att…

1 85 268 29K 104

Samuel Groß @5aelo

a year ago

Finally got around to publishing the slides of my talk @offensive_con from ~two weeks ago. Sorry for the delay! The V8 Heap Sandbox: saelo.github.io/presentations/… Fantastic conference, as usual! :)

1 86 291 47K 99

xvonfers @xvonfers

2 years ago

CVE-2023-6702: Type Confusion in V8(CaptureAsyncStackTrace). [1501326]Fix the case when the closure has run We were using the closure pointing to NativeContext as a marker that the closure has run, but async stack trace code was confused about it. chromium.googlesource.com/v8/v8.git/+/bd…

1 6 37 25K 15

Erik @erikcorry

2 years ago

wingolog.org/archives/2023/… The last 5 years of V8's garbage collector

3 10 47 13K 19

Maddie Stone @maddiestone

2 years ago

🪲 New RCA up for CVE-2021-4102 by @BTiszka! It's a wild one in Chrome's Turbofan #itw0days googleprojectzero.github.io/0days-in-the-w…

0 46 143 35K 46

Samuel Groß @5aelo

2 years ago

Another exciting step for the V8 sandbox: with crrev.com/c/5007733 (in Chrome 121) BytecodeArrays are now the first internal objects to move out of the sandbox and into the new trusted heap space: docs.google.com/document/d/1Ir…!

2 45 155 28K 36

Dataflow Security @dfsec_com

2 years ago

After 3 years, we finally managed to write our first blog post about a powerful XNU infoleak patched in 17.1 blog.dfsec.com/ios/2023/11/19…

2 79 324 131K 83

Man Yue Mo @mmolgtm

2 years ago

In this post I'll use CVE-2023-4069, a type confusion bug in the Maglev JIT compiler of Chrome that I reported in July, to gain RCE in the Chrome renderer sandbox: github.blog/2023-10-17-get…

5 102 313 57K 93

Man Yue Mo @mmolgtm

2 years ago

In this post I'll use CVE-2023-3420, an incorrect side effect modelling bug in the JIT compiler that I reported to Chrome, to gain a sandboxed remote code execution in the renderer: github.blog/2023-09-26-get…

4 109 297 41K 85

Ben Hawkes @benhawkes

2 years ago

"The WebP 0day" -- a full technical analysis the recently patched vulnerability in the WebP image library that was exploited in the wild (CVE-2023-4863). blog.isosceles.com/the-webp-0day/

14 316 813 180K 214

SorryMybad @S0rryMybad

2 years ago

牛蛙

k0shl @KeyZ3r0

2 years ago

牛蛙

2 72 178 47K 44

0 0 3 9K 0

jeff @jeffssh

2 years ago

I have completed the FORCED ENTRY RCE + SBX chain with a PAC bypass. The calculator payload can be found here: github.com/jeffssh/CVE-20…. I learned a lot about iOS exploitation and can't wait to share that in a blog post, which I'll release along with the code to generate this PDF.

8 91 410 59K 101

Download Video

Niklas B @_niklasb

2 years ago

interesting, but also how slow is it? googleprojectzero.blogspot.com/2023/08/mte-as…

1 10 46 15K 8

Dinesh Shetty @Din3zh

2 years ago

Root Cause Analysis - CVE-2023-32439 Type Confusion in Webkit - blog.pksecurity.io/2023/07/07/cve… #BrowserSecurity #bugbountytips #WebKit

1 29 84 12K 20

Maddie Stone @maddiestone

2 years ago

😍 New RCA! The v8 security team is at it again with a new RCA for CVE-2022-4262, the #itw0days patched in December 2022. I really like how they modified the fuzzing flag to better find this class of bugs! Thank you @5aelo! 🔥 googleprojectzero.github.io/0days-in-the-w…