53 matches found
CVE-2025-39965
免責事項 提供されるすべてのコンテンツは、教育および研究目的のみで提供されています。すべてのテストは、安全で隔離された環境であるLinuxカーネルエミュレータ上でのみ実施されました。この研究において、他者が所有する本番システムやデバイスは関与しておらず、影響も受けていません。著者は、提示された情報の誤用、またはその適用によって生じるいかなる損害についても責任を負いません。 ブログ https://streypaws.github.io/posts/Dissecting-a-1-Day-Vulnerability-in-Linux-XFRM-Subsystem/...
CVE-2026-43499
CVE-2026-43499 ⚡ シンプルな使い方 このプロジェクトは、以下のような安全で許可された環境でのみ使用してください： ローカル仮想マシン Dockerコンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source...
CVE-2026-46331
cve-id ⚡ 簡単な使用方法 このプロジェクトは、以下のような安全かつ許可された環境でのみ使用してください： ローカル仮想マシン Dockerコンテナ 分離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate...
Pentest-Home-Lab
Pentest Home Lab A personal cybersecurity home lab for practi...
Bug-Bounty-Practice-lab
Syntex Solutions — Vulnerable Lab ⚠️ WARNING — FOR AUTHOR...
react2shell-poc
日本語 !CAUTION For Authorized Security Re...
ethical-hacking-lab-reports
Ethical Hacking & Information Security Lab Reports !Security...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SandboxJS library, related to improper code generation management, allows a violator to escape from the isolated programming environment.
The vulnerability of the SandboxJS library is related to improper handling of code generation. Exploiting this vulnerability can allow a remote attacker to escape from an isolated programming environment...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
ROS-20251202-05
A vulnerability in the DevTools component of the Google Chrome browser is related to an access control flaw in an isolated environment. of an isolated environment. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the sandbox protection mechanism. sandbox...
0-DAY
0-DAYzero-day !Repo Statushttps://img.shields.io/badge/...
The vulnerability of the isolated Sandbox software environment in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows a hacker to bypass the sandbox protection mechanism.
The vulnerability of the isolated Sandbox software environment in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to bypass the sandbox’s security mechanisms...
The vulnerability of the Views component in Google Chrome allows a hacker to escape from an isolated environment.
The vulnerability of the Views component in Google Chrome is related to improper implementation. Exploiting this vulnerability can allow an attacker to escape from a isolated environment using a specially crafted HTML page...
5 Must-Have Tools for Effective Dynamic Malware Analysis
Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor its behavior and gather actionable indicators. Effective analysis must be fast, in-depth, and precise. These five...
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allow attackers to escape from a isolated software environment.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to data type mixing errors. Exploiting these vulnerabilities can allow a malicious actor to gain control and execute actions from an isolated software environment...
The vulnerability of the interpreter for Ghostscript software, which handles the processing, conversion, and generation of documents, relates to the execution of operations beyond the buffer boundaries in memory. This vulnerability allows an attacker to escape from the isolated software environment.
The vulnerability of the interpreter for software used to process, transform, and generate Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to escape from the isolated software environment...
GHSA-PX7W-C9GW-7GJ3 Apache James server: Privilege escalation via JMX pre-authentication deserialization
Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JM...
The vulnerability of the Scalefusion MDM Agent, a software tool for managing endpoints, stems from deficiencies in access control. This vulnerability allows a malicious individual to escape from the isolated software environment.
The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain access to the isolated software environment...