CrushFTP10-Docker-CVE-2024-4040

Despliegue de Docker de CrushFTP 10.0 vulnerable a CVE-2024-4040 Este repositorio proporciona un Dockerfile para construir una imagen Docker y desplegar un contenedor Linux con un servidor CrushFTP que es vulnerable a la Vulnerabilidad de Escape del Sandbox VFS de CrushFTP CVE-2024-4040. ⚠️ Aviso...

browser-pwn

Browser-Pwn The world of Browsers is dominated by 4 major players: Chromium/Chrome Blink-Engine Firefox Gecko-Engine Safari WebKit-Engine Edge Blink-Engine former EdgeHTML-Engine The following is split into two parts: Information that helps to understand their architecture and implementation and...

cve-2025-59532-poc

Entorno Docker para CVE-2025-59532 Un entorno de investigación basado en Docker para analizar CVE-2025-59532, una vulnerabilidad de path traversal en OpenAI Codex CLI que permite escribir archivos arbitrarios fuera del sandbox del espacio de trabajo previsto. Parte del curso de CMU: 18-739 Hackin...

Percino

Percino Evasive Golang Loader Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES 3DES encryption algorithm. Full EDR bypass with any C2 Framework. Tested with Coba...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

cve-2026-22747-sandbox

test test1 test2 test3 test4 test5 test6 test7 test8 9 10 19 391211111111111...

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

Yara-rules

About What is this? A repo containing some of my privately developed Yara rules. Why? To contribute to the community. Can I use these rules? Of course! That's why I created this repo. You can use them in your detection systems. For example, CAPE sandbox, MalwareBazaar, UnPac.me and VirusTotal mus...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

CVE-2026-87654

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

CVE-2026-87650

A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox,...

CVE-2026-87646

A flaw was found in Google Chrome's Web Authentication component. A remote attacker could exploit a use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-87637

A flaw was found in Chromium, specifically within the Extensions component. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to significant compromise of the...

CVE-2026-87621

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

CVE-2026-87613

A flaw was found in Chromium Extensions. A remote attacker could exploit an incorrect reference resolution vulnerability by sending crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-87628

A flaw was found in the Cast component of Chromium. An adjacent attacker could exploit a use-after-free vulnerability by sending specially crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading to a complete compromise of the...

CVE-2026-87607

A flaw was found in Google Chrome. This vulnerability, known as a 'use after free' error, occurs when a program attempts to use memory after it has been deallocated. This can allow a remote attacker to potentially execute arbitrary code outside the browser's security sandbox when a user visits a...

CVE-2026-87578

A flaw was found in Google Chrome. This vulnerability, known as a use-after-free, exists in the Receiver component. An adjacent attacker could exploit this by sending specially crafted network traffic, leading to the execution of unauthorized code outside of the browser's security sandbox. This...

CVE-2026-87581

A flaw was found in Google Chrome's Payments component. A remote attacker, leveraging social engineering, could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside the browser's...

CVE-2026-87558

A flaw was found in Google Chrome. This use-after-free vulnerability, specifically within the Payments component, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by tricking a user into visiting a specially crafted HTML page,...