Sploitus

Exploit for Integer Overflow or Wraparound in Apple Ipados

CVE-2023-32434CVE-2023-4863CVE-2024-5274CVE-2025-43300CVE-2025-6554

githubexploit · 2023-11-02

Exploit Code

README25 lines
## https://sploitus.com/exploit?id=81FC98B7-1F90-5048-9D26-27164AB702F8
# PoC

A collection of proof-of-concept codes from DARKNAVY.

- [CVE-2025-43300](./CVE-2025-43300)
  - Target: iOS && macOS
  - Version: before iOS 18.6.2 && macOS 14.7.8
- [CVE-2025-6554](./CVE-2025-6554)
  - Target: Chrome Renderer
  - Version: before 138.0.7204.96
- [CVE-2024-5274](./CVE-2024-5274)
  - Target: Chrome Renderer
  - Version: before 125.0.6422.112
  - Blog Post: [CVE-2024-5274: A Minor Flaw in V8 Parser Leading to Catastrophes](https://www.darknavy.org/blog/cve_2024_5274_a_minor_flaw_in_v8_parser_leading_to_catastrophes/)
- [steam-2260570](./steam-2260570)
  - Target: Steam Client
  - Blog Post: [Exploiting Steam: Usual and Unusual Ways in the CEF Framework](https://www.darknavy.org/blog/exploiting_steam_usual_and_unusual_ways_in_the_cef_framework/)
- [CVE-2023-32434](./CVE-2023-32434)
  - Target: iOS && macOS
  - Version: before iOS 16.5.1 && macOS 13.4.1
- [CVE-2023-4863](./CVE-2023-4863)
  - Target: Chrome Renderer
  - Version: 119.0.6022.0
  - Blog Post: [Part 1](https://www.darknavy.org/blog/exploiting_the_libwebp_vulnerability_part_1/), [Part 2](https://www.darknavy.org/blog/exploiting_the_libwebp_vulnerability_part_2/)