56 matches found
CVE-2025-39965
AVERTISSEMENT Tout le contenu fourni l'est uniquement à des fins éducatives et de recherche. Tous les tests ont été menés exclusivement sur un émulateur de noyau Linux, dans un environnement sûr et isolé. Aucun système de production ni appareil appartenant à des tiers n'a été impliqué ou affecté ...
CVE-2026-43499
CVE-2026-43499 ⚡ Utilisation simple N'utilisez ce projet que dans des environnements sûrs et autorisés, tels que : Machines virtuelles locales Conteneurs Docker Configurations de laboratoire isolées Environnements de test d'intrusion autorisés Exemple de configuration : git clone cd Project use...
CVE-2026-46331
cve-id ⚡ Utilisation simple Utilisez ce projet uniquement dans des environnements sûrs et autorisés, tels que : Machines virtuelles locales Conteneurs Docker Configurations de laboratoire isolées Environnements de test d'intrusion autorisés Exemple de configuration : git clone cd Project use pyth...
Pentest-Home-Lab
Pentest Home Lab A personal cybersecurity home lab for practi...
RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery
Cross-Site Scripting XSS remains one of the most prevalent and damaging classes of web vulnerabilities. LLM-based coding agents offer a promising approach to XSS discovery by combining source-code reasoning with interactive testing against a running application. However, a coding agent's claims...
Bug-Bounty-Practice-lab
Syntex Solutions — Vulnerable Lab ⚠️ WARNING — FOR AUTHOR...
react2shell-poc
日本語 !CAUTION For Authorized Security Re...
ethical-hacking-lab-reports
Ethical Hacking & Information Security Lab Reports !Security...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SandboxJS library, related to improper code generation management, allows a violator to escape from the isolated programming environment.
The vulnerability of the SandboxJS library is related to improper handling of code generation. Exploiting this vulnerability can allow a remote attacker to escape from an isolated programming environment...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
ROS-20251202-05
A vulnerability in the DevTools component of the Google Chrome browser is related to an access control flaw in an isolated environment. of an isolated environment. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the sandbox protection mechanism. sandbox...
0-DAY
0-DAYzero-day !Repo Statushttps://img.shields.io/badge/...
The vulnerability of the isolated Sandbox software environment in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows a hacker to bypass the sandbox protection mechanism.
The vulnerability of the isolated Sandbox software environment in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to bypass the sandbox’s security mechanisms...
The vulnerability of the Views component in Google Chrome allows a hacker to escape from an isolated environment.
The vulnerability of the Views component in Google Chrome is related to improper implementation. Exploiting this vulnerability can allow an attacker to escape from a isolated environment using a specially crafted HTML page...
5 Must-Have Tools for Effective Dynamic Malware Analysis
Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor its behavior and gather actionable indicators. Effective analysis must be fast, in-depth, and precise. These five...
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allow attackers to escape from a isolated software environment.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to data type mixing errors. Exploiting these vulnerabilities can allow a malicious actor to gain control and execute actions from an isolated software environment...
The vulnerability of the interpreter for Ghostscript software, which handles the processing, conversion, and generation of documents, relates to the execution of operations beyond the buffer boundaries in memory. This vulnerability allows an attacker to escape from the isolated software environment.
The vulnerability of the interpreter for software used to process, transform, and generate Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to escape from the isolated software environment...
GHSA-PX7W-C9GW-7GJ3 Apache James server: Privilege escalation via JMX pre-authentication deserialization
Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JM...