cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...

Percino

Percino Loader Evasivo en Golang Percino es un loader en Golang que ejecuta shellcode utilizando la técnica de process hollowing con medidas anti-sandbox y anti-análisis. El shellcode está cifrado con el algoritmo de cifrado Triple DES 3DES. Bypass completo de EDR con cualquier framework C2...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

cve-2026-22747-sandbox

test test1 test2 test3 test4 test5 test6 test7 test8 9 10 19 391211111111111...

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

Yara-rules

About What is this? A repo containing some of my privately developed Yara rules. Why? To contribute to the community. Can I use these rules? Of course! That's why I created this repo. You can use them in your detection systems. For example, CAPE sandbox, MalwareBazaar, UnPac.me and VirusTotal mus...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

CVE-2026-87654

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

CVE-2026-87650

A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox,...

CVE-2026-87646

A flaw was found in Google Chrome's Web Authentication component. A remote attacker could exploit a use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-87637

A flaw was found in Chromium, specifically within the Extensions component. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to significant compromise of the...

CVE-2026-87621

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

CVE-2026-87613

A flaw was found in Chromium Extensions. A remote attacker could exploit an incorrect reference resolution vulnerability by sending crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-87628

A flaw was found in the Cast component of Chromium. An adjacent attacker could exploit a use-after-free vulnerability by sending specially crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading to a complete compromise of the...

CVE-2026-87607

A flaw was found in Google Chrome. This vulnerability, known as a 'use after free' error, occurs when a program attempts to use memory after it has been deallocated. This can allow a remote attacker to potentially execute arbitrary code outside the browser's security sandbox when a user visits a...

CVE-2026-87578

A flaw was found in Google Chrome. This vulnerability, known as a use-after-free, exists in the Receiver component. An adjacent attacker could exploit this by sending specially crafted network traffic, leading to the execution of unauthorized code outside of the browser's security sandbox. This...

CVE-2026-87581

A flaw was found in Google Chrome's Payments component. A remote attacker, leveraging social engineering, could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside the browser's...

CVE-2026-87558

A flaw was found in Google Chrome. This use-after-free vulnerability, specifically within the Payments component, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by tricking a user into visiting a specially crafted HTML page,...

CVE-2026-87528

A flaw was found in Google Chrome. This type confusion vulnerability, specifically in the Rust component, could allow a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page...

CVE-2026-87526

A flaw was found in Chromium. A remote attacker leveraging social engineering could exploit a use-after-free vulnerability in the Passwords component. This could potentially allow the attacker to execute arbitrary code outside the sandbox via user interface interaction...