Blog
Welcome to Tashita’s vulnerability research blog. Here our team publishes in-depth technical analysis of real-world vulnerabilities: browser exploitation, JavaScript engine internals (V8, WebKit, JavaScriptCore), fuzzing techniques, and full exploit walkthroughs from our CVE discoveries. Every post comes from the same research workflow that powers SeekZero, our browser vulnerability research framework.
CVE-2024-7535
CVE Details Google Chrome August 5, 2024 – Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High[...]
CVE-2024-7534
CVE Details Google Chrome August 5, 2024 – Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity:[...]
Fuzzing Series II: Precise Code Coverage
Code Coverage is a technique used to obtain information about which internal code of a binary is being executed when it is running. In Fuzz Testing, we can receive this feedback from the Target on each execution, allowing us[...]
Fuzzing Series I: The Executor
The Executor is the component of a fuzzer responsible for running the test file (Testcase) in the software being tested (Target). The ideal objective when designing an Executor is to execute Testcases as quickly and efficiently as possible, without[...]