CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua Sandbox Escape Remote Code Execution CVE‑2022‑0543 — Redis Lua Sandbox Escape คืออะไร? ช่องโหว่นี้เกิดเฉพาะบน Redis ที่ติดตั้งผ่าน Debian / Ubuntu package เท่านั้น เพราะ Redis ถูกคอมไพล์พร้อม Lua engine แบบ dynamic module lua-cjson, lua-bitop ทำให้ผู้โจมตีสามารถเรียกใช้:...

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2020-6468-PoC

CVE-2020-6468-PoC 供養用 サンドボックスエクスプロイトは含まれていません PoC 環境 OS: Ubuntu 18.04 LTS 64-bit Chromium: Version 81.0.4044.92 開発者ビルド 64-bit フラグ: --no-sandbox --single-process --disable-gpu 参考文献 https://bugs.chromium.org/p/chromium/issues/detail?id=1076708...

CVE-2025-2783

CVE-2025-2783 CVE-2025-2783을 위한 시뮬레이션된 PoC — Chrome의 Mojo IPC에서 샌드박스 이스케이프 취약점. 피싱 전달, 메모리 퍼징, IPC 시뮬레이션 및 로깅을 포함합니다. 레드 팀 데모, 탐지 엔지니어링 및 교육 용도로 안전합니다. 이 프로젝트는 Windows 시스템에서 샌드박스 이스케이프 및 로컬 코드 실행을 허용한 Google Chrome의 Mojo IPC 프레임워크의 취약점인 CVE-2025-2783에 대한 안전하고 교육적인 개념 증명을 시뮬레이션합니다. ⚠️ 이것은 실제 익스플로잇이...

cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783: Google Chrome Mojo Sandbox Escape CVSS Score: 8.3 High Discovered by: Kaspersky Status: Actively exploited in the wild espionage campaigns Overview CVE-2025-2783 is a Windows-specific privilege escalation vulnerability in Google Chrome's Mojo Interprocess Communication IPC framewor...

UnjailMe

UnjailMe A sandbox escape based on: the proof-of-concept CVE-2018-4087 by Rani Idan Zimperium @cheesecakeufo's securityd overflow proof-of-concept zeroday, no CVE known, thank you Abraham! About the ZIMPERIUM PoC Rani used sbtool from Jonathan Levine to find out what services were accessible for...

RCE-CVE-2017-0199-detection-analysis

🛡️ BankPaymAdviceVend.Report.docx CVE-2017-0199 – Full Blue Team Sandbox Analysis- My approach to analayze that malware that leadsto critical security vulnerability in Microsoft Office. Advanced Malware Detonation • Exploit Behaviour • IOCs • Detection Engineering. 🎯 1. Executive Summary This...

PT-2026-90721

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g., /var/cache, /var/dat...

PT-2026-90728

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasm rt allocate funcref table wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

SnatchBox

SnatchBox SnatchBox CVE-2020-27935 is a sandbox escape vulnerability affecting macOS up to version 10.15, as well as early beta versions of macOS 11.0. The most significant impact of SnatchBox is that it allows a malicious publisher to escape the non-optional macOS App Store sandbox and obtain...

CrushFTP10-Docker-CVE-2024-4040

CrushFTP 10.0 Docker Deployment vulnerable to CVE-2024-4040 This repository provides a Dockerfile to build a Docker image and deploy a Linux container with a CrushFTP server that is vulnerable to the CrushFTP VFS Sandbox Escape Vulnerability CVE-2024-4040. ⚠️ Disclaimer This repository is provided...

browser-pwn

Browser-Pwn The world of Browsers is dominated by 4 major players: Chromium/Chrome Blink-Engine Firefox Gecko-Engine Safari WebKit-Engine Edge Blink-Engine former EdgeHTML-Engine The following is split into two parts: Information that helps to understand their architecture and implementation and...

cve-2025-59532-poc

CVE-2025-59532 Docker環境 CVE-2025-59532を分析するためのDockerベースの研究環境です。これはOpenAI Codex CLIにおけるパストラバーサル脆弱性であり、意図されたワークスペースサンドボックス外への任意のファイル書き込みを可能にします。 CMUのコースの一部：2025年秋学期「18-739 ハッキングとオフェンシブセキュリティ」 はじめに リポジトリのクローン まず、このリポジトリをクローンします： root@kitploit: git clone...

Percino

Percino Evasive Golang Loader Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES 3DES encryption algorithm. Full EDR bypass with any C2 Framework. Tested with Coba...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

cve-2026-22747-sandbox

test test1 test2 test3 test4 test5 test6 test7 test8 9 10 19 391211111111111...

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

Yara-rules

About What is this? A repo containing some of my privately developed Yara rules. Why? To contribute to the community. Can I use these rules? Of course! That's why I created this repo. You can use them in your detection systems. For example, CAPE sandbox, MalwareBazaar, UnPac.me and VirusTotal mus...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...