CVE-2026-87509

A flaw was found in the Google Chrome Updater. This incorrect authorization vulnerability allows a local attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by exploiting the flaw through a local program, leading to unauthorized code execution on the...

CVE-2026-87448

A flaw was found in DevTools in Google Chrome. This vulnerability, a use-after-free, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

CVE-2026-11114-Node.js-vm-Sandbox-Escape-via-Proxy

CVE-2026-11114 – Escape de sandbox de Node.js vm mediante Proxy Código del programa Node.js // sandboxserver.js - Vulnerable VM sandbox const vm = require'vm'; const express = require'express'; const app = express; app.useexpress.json; app.post'/eval', req, res = const code = req.body.code; const...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — Inyección SQL en ext/pgsql de PHP mediante la ruptura con barra invertida de E'...' Prueba de concepto para CVE-2026-17543 CVSS 9.8 Crítico, CWE-89, una vulnerabilidad de inyección SQL en la extensión PostgreSQL procedural de PHP. Resumen de la vulnerabilidad pginsert, pgselect,...

Januscape-Hotfix

Repositorio de soluciones para Januscape — CVE-2026-53359 English Colección completa de soluciones para la vulnerabilidad de escape de máquina virtual KVM/x86 shadow MMU CVE-2026-53359. Desde parches en caliente sin tiempo de inactividad hasta actualizaciones del kernel, cubriendo todos los...

V8-sbx-bypass-collection

Colección de escapes/bypasses/violaciones del sandbox de V8 y VR Una colección de enlaces relacionados con VR del sandbox de V8 y explotación Contenido IssueTracker Articles Papers & Slides Design documents IssueTracker 2023: "issue id: 40940619, Escape del sandbox de V8 debido a que las etiqueta...

CVE-2025-2783

Chromium CVE-2025-2783: Escape de Sandbox y Exploit RCE de Cadena Completa Este repositorio contiene una implementación de exploit de cadena completa para CVE-2025-2783. La vulnerabilidad reside en la capa de comunicación Ipcz de Chromium, permitiendo a un atacante lograr un escape de sandbox y...

CVE-2019-5736

CVE-2019-5736 Referencia: cve-2019-5736-poc 1. Editar el comando poc en stage2.cve 2. Construir la imagen docker docker build -t cve . 3. Ejecutar docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. Respaldar docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it...

CVE-2021-3156

Título del Proyecto Generador de exploit para CVE-2021-3156 sudo Instalación 1. Instala dependencias ./install.sh 2. Ejecuta generador de exploit: ./run.sh 3. Si la versión de sudo del sistema es vulnerable se genera un exploit para la versión instalada 4. El exploit se genera en exploit.c y el...

CVE-2019-5736-POC

通过 RunC 逃逸 Docker CVE-2019-5736 的概念验证代码 此 POC 主要基于 YuvalAvra 的 POC。 我不对本 POC 中使用的代码主张任何功劳。 有关此漏洞的更多信息以及如何利用它的演示，请参阅工作表。 工作表中的信息基于 Twistlock Labs 的博客文章。 使用方法 此 POC 能够修改主机系统上的二进制文件，因此建议在虚拟机中进行。 该 POC 会覆盖主机上的 runC，将其替换为用于设置持久远程桌面（使用 VNC）的代码 克隆仓库： $ git clone...

AlmaLinux 10 : firefox (ALSA-2026:69461)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69461 advisory. firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92024 firefox: thunderbird: Mitigation bypass in the Remote Settings Client component...

RockyLinux 9 : thunderbird (RLSA-2026:70642)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70642 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clie...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2026:1126-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1126-1 advisory. Update to Firefox 140.9.0 ESR MFSA 2026-22, bsc1260083: - CVE-2026-4684: Race condition,...

Linux Distros Unpatched Vulnerability : CVE-2026-93834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent...

CVE-2026-93834: Use After Free

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

CVE-2019-12735

CVE-2019-12735 该CVE在neovim 0.3.6和vim 8.1.1365之后被修复。 POC vim demo1.txt 远程shell 1. 创建恶意文本文件： gcc makedemo3.c -o makedemo3 ./makedemo3 2. 在另一个会话中构建客户端： nc -vlp 9999 3. 打开恶意文件： vim demo3.txt 之后，您可以在会话中执行任意Linux命令。 参考 A POC demo on github Exploit DB netcat ANSI \x1b?7l : 輸出到行末時不換行, 持續覆蓋最後一個字元 \x1bS:...

dirtypipe-container-breakout-poc

Dirty Pipe 容器逃逸 已移至 https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

CVE-2019-5736-PoC

CVE-2019-5736-PoC PoC para CVE-2019-5736 Creado con ayuda de @singe, @cablethief, y @feexd Probado en Ubuntu 18.04, Debian 9 y Arch Linux. Versiones de Docker 18.09.1-ce y 18.03.1-ce. Este PoC actualmente no funciona con Ubuntu 16.04 y CentOS. Ve a ver el código del exploit de Dragon Sector las...