73 matches found
codejail
CodeJail CodeJail は、信頼されないコードをセキュアなサンドボックス内で実行するための管理を行います。主に Python の実行用に設計されていますが、他の言語でも使用できます。 セキュリティは AppArmor によって強化されます。お使いのオペレーティングシステムが AppArmor をサポートしていない場合、または AppArmor プロファイルが正しく定義・設定されていない場合、CodeJail は実行を保護しません。 CodeJail は設定可能なように設計されており、適切にインストールすれば Python 実行用に自動設定されます。 CodeJail...
cmdchamp
cmdchamp Bash CLI 트레이너 — ls부터 권한 상승까지 30개 레벨. 모든 질문은 실제 명령어를 입력하도록 요구합니다 — 즉각적인 피드백을 받고 다음으로 넘어가세요. 틀리면 단순히 답을 보여주지 않습니다: 여러분의 명령어가 출력한 결과와 원하는 결과를 비교해 보여주고, 파이프라인의 경우 각 단계의 줄 수를 보여줘서 어디서 실패했는지 알 수 있습니다. 텍스트 매칭 질문의 경우 여러분의 답에 가장 가까운 정답과 빠뜨린 정확한 플래그를 알려줍니다. 긴 방법으로 맞추면 짧은 방법도 보여줍니다 — cat f | grep -...
React2Shell-CVE-2025-55182
HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 HackIndex.io による React2Shell 脆弱性のサンドボックス環境です。 ポート3000でWebアプリ、ポート2222でSSHサーバーが起動します。 環境を起動する root@kitploit: docker compose up --build --force-recreate SSH Web管理 Port 2222 webadmin - TrainingPassword123! root@kitploit: ssh...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
ROS-20260720-73-0052
The vulnerability of the Canvas component in Google Chrome browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within a isolated programming environment, using a specially created HTML page...
cybersecurity-exam-report
Cybersecurity Exam Project: ProFTPD Exploitation and MySQL Dat...
CVE-2026-14383
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-9896
Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-42308
A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service DoS condition, making the application unavailable. Mitigation To...
pocxgen-agent
PoCXGen Agent An LLM-orchestrated multi-agent pipeline for au...
CVE-2026-35477
InvenTree is an Open Source Inventory Management System. From 1.2.3 to 1.2.6, the fix for CVE-2026-27629 upgraded the PARTNAMEFORMAT validator to use jinja2.sandbox.SandboxedEnvironment. However, the actual renderer in part/helpers.py was not updated and still uses the non-sandboxed...
CVE-2026-33941
Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler bin/handlebars / lib/precompiler.js concatenates user-controlled strings — template file names and several CLI options — directly into the JavaScript it...
Unspecified Vulnerability in HCL AION (CNVD-2026-15148)
HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a security vulnerability that stems from untrusted file parsing operations not being performed in an isolated sandboxed environment, which can be exploited by an attacker to cause unexpected behavior when...
CVE-2025-14927
A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...
EUVD-1999-0747
Malware in sbrugna...
EUVD-2011-4153
Malware in sbrugna...
EUVD-2019-2209
Malware in sbrugna...
EUVD-2024-51558
Malicious code in bioql PyPI...