CVE-2026-37008

CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete object graph. For example, calling ctypes.CDLLNone...

Jenkins Script Security Plugin <=1.49 - Sandbox Bypass

A sandbox bypass vulnerability exists in the Jenkins Script Security Plugin versions 1.49 and earlier within src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java. This flaw allows attackers with permission to submit sandboxed scripts to execute arbitrary code on th...

ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE

ServiceNow AI Platform Brazil, Australia, Zurich, and Yokohama releases before patching contains a pre-authentication remote code execution vulnerability. The /assessmentthanks.do endpoint passes the sysparmassessabletype parameter into GlideRecord's addQuery, which evaluates "javascript:" prefix...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE 漏洞原因分析 1. 缺乏代码安全检查 问题: 系统没有对用户提供的源代码进行任何安全检查。 证据: generateexecutionscript 方法直接将用户代码插入到执行脚本中： python code += "\n" + self.tool.sourcecode + "\n" 没有AST分析来检测危险操作（如os.system、subprocess.call、eval等） 没有导入限制或模块白名单 2. 不安全的exec使用 问题: 直接使用exec执行用户代码，且全局字典包含环境变量。 证据: python...

CVE-2025-6384

CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

cve-2018-4233

CVE-2018-4233 针对CVE-2018-4233的利用程序，这是WebKit的JIT编译器中的一个bug。已在macOS 10.13.3上的Safari 11.0.3上测试。 更多详情请参见 https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf 该利用程序通过构建addrof和fakeobj原语，然后按照 http://www.phrack.org/papers/attackingjavascriptengines.html 中所述伪造一个typed...

CVE-2022-0543

CVE-2022-0543 Exploit completamente funcional para RCE en Redis mediante la vulnerabilidad de escape del sandbox de Lua. Basado en https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Características: Reverse shell automático -I + -P Ejecución d...

CVE-2022-40635

CVE-2022-40635: Groovy Sandbox Bypass in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2025-55130

CVE-2025-55130 - Node.js权限模型符号链接逃逸 root@kitploit: / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Node.js权限模型绕过——通过精心构造的符号链接 发现者：natann @ JFrog 概述 Node.js中的一个路径遍历漏洞允许通过指向绝对路径的符号链接结合相对路径遍历，突破 --allow-fs-read 和...

CVE-2026-24118

⚠️ 安全研究与法律免责声明 📌 本仓库的目的 本仓库严格仅用于教育、学术及经授权的网络安全研究目的 。 其旨在帮助理解以下内容： 受控环境中的安全漏洞与利用概念 沙箱隔离机制及其局限性 安全的软件设计与防御性安全实践 🚫 仅限授权使用 本仓库只能在已获得明确许可的环境中使用，例如： 个人或受控虚拟机 Docker 或隔离的实验环境 经授权的渗透测试项目 学术或网络安全培训环境 严禁在授权环境之外使用。 ⚖️ 不承担责任 / 免责声明 本仓库的作者与贡献者不承担 因使用、滥用或分发本项目及其内容而产生的任何误用、损害、损失或法律后果的责任。 使用本仓库即表示您确认：...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

CVE-2026-78851

Grav 认证路径遍历 / 通过 Twig mediadirectory 实现任意目录泄露 报告者 姓名： CYBER-SEC 联系方式： [email protected] 摘要 Grav 的 Twig 函数 mediadirectory 在页面内容 Twig 沙箱白名单中暴露，但未对非流输入正确执行路径包含限制。 具有页面编辑权限的认证用户可以调用 mediadirectory'/绝对/路径'，或在启用 Twig 的页面内容中使用 mediadirectory'../../../../path' 等相对遍历方式。Grav 随后会索引 Web...

Sandb0x-Xtract0r

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

yoloai

yoloAI Sandboxed runner for AI coding agents. No permission fatigue, no credentials in the box, no changes to your project until you approve them. AI coding agents work best with the guardrails off, and that's a terrible way to run them on your real machine. yoloAI gives the agent a disposable...

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

lure

lure Local Linux binary analysis. Zero cloud. Zero root. Zero cost. lure is a local Linux ELF analysis and sandboxing tool for security researchers, reverse engineers, and CTF players. Version 0.7.1 adds ARM64 binary support via QEMU user-mode emulation. It provides three complementary workflows:...

exploit-js2py

CVE-2024-28397 - js2py 沙箱逃逸 描述 CVE-2024-28397 漏洞影响 js2py 的 v0.74 及以下版本，这是一个允许在 Python 解释器中执行 JavaScript 代码的 Python 库。 该漏洞存在于 disablepyimport 方法的实现中，该方法本应阻止 JavaScript 代码访问 Python 对象。然而，由于实现缺陷，攻击者可以绕过此限制，在 JavaScript 环境中获取对 Python 对象的引用，从而在主机上执行任意代码。 技术细节 受影响组件： js2py.disablepyimport 受影响版本： 至 v0.7...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...

EUVD-2026-76923

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...