cmdchamp

cmdchamp Bash CLI प्रशिक्षक — ls से लेकर privilege escalation तक 30 स्तर। हर प्रश्न आपसे एक वास्तविक कमांड टाइप करने को कहता है — तुरंत फीडबैक पाएं, आगे बढ़ें। एक भी गलत होने पर यह सिर्फ उत्तर नहीं दिखाता: यह दिखाता है कि आपके कमांड ने क्या आउटपुट दिया बनाम जो अपेक्षित था, और पाइपलाइन के लिए हर च...

codejail

CodeJail CodeJail अविश्वसनीय कोड को सुरक्षित सैंडबॉक्स में निष्पादित करने का प्रबंधन करता है। यह मुख्य रूप से Python निष्पादन के लिए डिज़ाइन किया गया है, लेकिन अन्य भाषाओं के लिए भी उपयोग किया जा सकता है। सुरक्षा AppArmor के साथ लागू की जाती है। यदि आपका ऑपरेटिंग सिस्टम AppArmor का समर्थन नहीं कर...

React2Shell-CVE-2025-55182

HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 React2Shell कमजोरी के लिए एक HackIndex.io सैंडबॉक्स वातावरण। यह पोर्ट 3000 पर एक वेब ऐप और पोर्ट 2222 पर एक SSH सर्वर शुरू करेगा। वातावरण शुरू करें root@kitploit: docker compose up --build --force-recreate SSH वेब एडमिन पोर्ट 2222...

claude-pentest

claude-pentest A local pentesting toolkit built for Claude Co...

cybersecurity-exam-report

Cybersecurity Exam Project: ProFTPD Exploitation and MySQL Dat...

CVE-2026-9896

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-42308

A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service DoS condition, making the application unavailable. Mitigation To...

pocxgen-agent

PoCXGen Agent An LLM-orchestrated multi-agent pipeline for au...

CVE-2026-35477

InvenTree is an Open Source Inventory Management System. From 1.2.3 to 1.2.6, the fix for CVE-2026-27629 upgraded the PARTNAMEFORMAT validator to use jinja2.sandbox.SandboxedEnvironment. However, the actual renderer in part/helpers.py was not updated and still uses the non-sandboxed...

CVE-2026-33941

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler bin/handlebars / lib/precompiler.js concatenates user-controlled strings — template file names and several CLI options — directly into the JavaScript it...

Unspecified Vulnerability in HCL AION (CNVD-2026-15148)

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a security vulnerability that stems from untrusted file parsing operations not being performed in an isolated sandboxed environment, which can be exploited by an attacker to cause unexpected behavior when...

CVE-2025-14927

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...

EUVD-1999-0747

Malware in sbrugna...

EUVD-2011-4153

Malware in sbrugna...

EUVD-2019-2209

Malware in sbrugna...

EUVD-2024-51558

Malicious code in bioql PyPI...

EUVD-2024-42526

Malicious code in bioql PyPI...

EUVD-2024-3607

Malicious code in bioql PyPI...

CVE-2025-34146

A prototype pollution vulnerability exists in @nyariv/sandboxjs versions = 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code. This can result in a denial-of-service DoS condition or, under certain conditions, escape the sandboxed environme...

Cross-Site Scripting (XSS)

@pdfme/common is vulnerable to cross-site scripting XSS. The vulnerability is due to improper handling of expression evaluation, which allows an attacker to escape the sandbox environment and execute arbitrary code or manipulate object prototypes to perform XSS and other malicious actions...