Januscape-Hotfix

Repositorio de soluciones para Januscape — CVE-2026-53359 English Colección completa de soluciones para la vulnerabilidad de escape de máquina virtual KVM/x86 shadow MMU CVE-2026-53359. Desde parches en caliente sin tiempo de inactividad hasta actualizaciones del kernel, cubriendo todos los...

V8-sbx-bypass-collection

V8 Sandbox escape/bypass/violation and VR collection A collection of links related to V8 sandbox VR and exploitation Contents IssueTracker Articles Papers & Slides Design documents IssueTracker 2023: "issue id: 40940619, V8 Sandbox escape due to type tags in ExternalPointerTable being too coarse...

CVE-2025-2783

Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...

CVE-2019-5736

CVE-2019-5736 Reference: cve-2019-5736-poc 1. edit poc command in stage2.cve 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. edit...

CVE-2021-3156

Project Title Exploit generator for CVE-2021-3156 sudo Installation 1. Install dependencies ./install.sh 2. Run exploit generator: ./run.sh 3. If the system's sudo version is vulnerable, an exploit is generated for the installed version 4. The exploit is generated in exploit.c and the binary...

CVE-2019-5736-POC

Escapando de Docker a través de RunC Un código de prueba de concepto para CVE-2019-5736 Este POC está fuertemente basado en el POC de YuvalAvra. No reclamo ningún crédito por el código utilizado en este POC. Se puede encontrar más información sobre esta vulnerabilidad y una demostración de cómo s...

AlmaLinux 10 : firefox (ALSA-2026:69461)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69461 advisory. firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92024 firefox: thunderbird: Mitigation bypass in the Remote Settings Client component...

RockyLinux 9 : thunderbird (RLSA-2026:70642)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70642 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clie...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2026:1126-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1126-1 advisory. Update to Firefox 140.9.0 ESR MFSA 2026-22, bsc1260083: - CVE-2026-4684: Race condition,...

Linux Distros Unpatched Vulnerability : CVE-2026-93834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent...

CVE-2019-12735

CVE-2019-12735 This CVE was fixed after neovim 0.3.6 and vim 8.1.1365 POC root@kitploit: vim demo1.txt Remote shell 1. Create malware text file: root@kitploit: gcc makedemo3.c -o makedemo3 ./makedemo3 2. Build client in another session: root@kitploit: nc -vlp 9999 3. Open malware file:...

dirtypipe-container-breakout-poc

Dirty Pipe Container Escape Moved to https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

CVE-2019-5736-PoC

CVE-2019-5736-PoC PoC para CVE-2019-5736 Creado con ayuda de @singe, @cablethief, y @feexd Probado en Ubuntu 18.04, Debian 9 y Arch Linux. Versiones de Docker 18.09.1-ce y 18.03.1-ce. Este PoC actualmente no funciona con Ubuntu 16.04 y CentOS. Ve a ver el código del exploit de Dragon Sector las...

CVE-2025-56015

CVE-2025-56015 GenieACS RCE Overview Proof-of-Concept exploit for CVE-2025-56015 a critical sandbox escape and code injection vulnerability in GenieACS allowing arbitrary JavaScript execution in the provisioning context. By leveraging the declare.constructor.constructor prototype chain, an attack...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" Bypass PoC Path traversal vulnerability in Python's tarfile module affecting versions 3.8.0 through 3.13.1. The filter="data" sandbox — intended to prevent unsafe extractions — can be bypassed by crafting paths that exceed PATHMAX 4096 bytes, causing...

cve-2024-21626-runc-1.1.11-escape

CVE-2024-21626 - runc Leaky Vessels Resumen Campo| Detalle ---|--- CVE| CVE-2024-21626 Componente afectado| runc ≤ 1.1.11 Clase de vulnerabilidad| Escape de contenedor mediante fuga de descriptor de archivo Apodo| Leaky Vessels Causa raíz runc filtra un descriptor de archivo interno típicamente...

insject

Insject insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces. It supports three main use-cases: LDPRELOAD-mode using libsetns.so LDPRELOAD=./libsetns.so SETNSARGS="..." Running a host command in a container insject...

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase Critical Sandbox Escape Unauthenticated / Low-Privilege → Root Remote Code Execution in NocoBase 📌 Overview CVE-2026-34156 is a critical sandbox escape vulnerability in NocoBase an open-source no-code/low-code platform. An attacker with the ability to create or execute...

CVE-2024-54152

⚙️🔨 IN PROGRESS CVE-2024-54152 POC Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclose...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers...