702 matches found
sgxray
SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...
ARES
Operator-Directed Red Team Orchestration & Continuous Security Validation Platform The open-core platform empowering enterprise red teams, MSSPs, and security operations centers to execute targeted offensive engagements, discover deterministic attack paths, and continuously validate defensive...
BrowserBox
BrowserBox — Remote Browser Isolation A full remote browser. Clientless access. Native performance. Self-host on Windows, macOS or Linux, or create cloud browser sessions through the API. Start a 7-Day Paid Evaluation · Buy a Commercial License · Talk to Sales Website · Live Demo · Documentation ...
CVE-2026-22686
Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...
CVE-2026-27597
CVE-2026-27597 - version Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary Enclave is a secure...
secretive
Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...
v0ltpwn
V0LTpwn V0LTpwn CVE-2019-11157 is a software-controlled fault attack on x86 processors. It is the first attack corrupting the integrity of SGX enclaves. Description All recent Intel processors exhibit a software interface for controlling core voltages without rebooting the system. This feature is...
CVE-2026-22686-RemoteCodeExecution-RCE-PoC
CVE-2026-22686 — enclave-vm Sandbox Escape PoC A proof-of-concept PoC exploit and payload generator for CVE-2026-22686 , a critical sandbox escape vulnerability in enclave-vm versions prior to 2.7.0 , allowing arbitrary code execution within the host Node.js runtime. ⚠️ Disclaimer : This tool is...
FakeEnclave
FakeEnclave A poc that abuses Enclave Tested in Win10 1809 What it can do? Anti-tamper There may be nothing to do Compile Visual Studio 2022 & WDK10 llvm-msvc link...
lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296
CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · Efficiency cores: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · Neural Engine: 11.0 GHz = 587 kHz × 18739 ≈...
[R2] Stand-alone Security Patch Available for Tenable Enclave Security Versions 1.7.0, 1.8.0, 1.9.1: SC-202610.1
R2 Stand-alone Security Patch Available for Tenable Enclave Security Versions 1.7.0, 1.8.0, 1.9.1: SC-202610.1 Arnie Cabral Thu, 10/22/2026 - 10:37 Please see https://www.tenable.com/security/tns-2026-31 for updated information and remediation guidance...
snapshot-demo
Snapshot Attack Demo This is the original demo of Unanticipated Snapshot Attack found by us. Thanks Intel for the Security Advisory. Build the demo Install Intel SGX SDK and Occlum First of all, anyone willing to run the demo must install Intel SGX SDK and Occlum you can choose to use our modifie...
Astra Linux – Vulnerability in Intel Microcode
Improper buffer restrictions in the firmware of certain IntelR XeonR Processors with SGX enabled may allow a privileged user to potentially enable privilege escalation through local access...
CVE-2026-96914
Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83885
Inadequate encryption strength in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...
CVE-2026-70097
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...
CVE-2026-70075
Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
CVE-2026-108471
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
