UnjailMe

UnjailMe Un escape de sandbox basado en: la prueba de concepto CVE-2018-4087 de Rani Idan Zimperium la prueba de concepto de desbordamiento de securityd de @cheesecakeufo zeroday, sin CVE conocido, ¡gracias Abraham! Acerca del PoC de ZIMPERIUM Rani usó sbtool de Jonathan Levine para descubrir qué...

RCE-CVE-2017-0199-detection-analysis

🛡️ BankPaymAdviceVend.Report.docx CVE-2017-0199 – Full Blue Team Sandbox Analysis- My approach to analayze that malware that leadsto critical security vulnerability in Microsoft Office. Advanced Malware Detonation • Exploit Behaviour • IOCs • Detection Engineering. 🎯 1. Executive Summary This...

PT-2026-90728

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasm rt allocate funcref table wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

PT-2026-90721

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g., /var/cache, /var/dat...

SnatchBox

SnatchBox SnatchBox CVE-2020-27935 es una vulnerabilidad de escape del sandbox que afecta a macOS hasta la versión 10.15, así como a las primeras versiones beta de macOS 11.0. El impacto más significativo de SnatchBox es que permite a un editor malicioso escapar del sandbox obligatorio de la App...

CrushFTP10-Docker-CVE-2024-4040

Despliegue de Docker de CrushFTP 10.0 vulnerable a CVE-2024-4040 Este repositorio proporciona un Dockerfile para construir una imagen Docker y desplegar un contenedor Linux con un servidor CrushFTP que es vulnerable a la Vulnerabilidad de Escape del Sandbox VFS de CrushFTP CVE-2024-4040. ⚠️ Aviso...

browser-pwn

Browser-Pwn El mundo de los navegadores está dominado por 4 actores principales: Chromium/Chrome motor Blink Firefox motor Gecko Safari motor WebKit Edge motor Blink antes motor EdgeHTML Lo siguiente está dividido en dos partes: Información que ayuda a entender su arquitectura e implementación y...

cve-2025-59532-poc

Entorno Docker para CVE-2025-59532 Un entorno de investigación basado en Docker para analizar CVE-2025-59532, una vulnerabilidad de path traversal en OpenAI Codex CLI que permite escribir archivos arbitrarios fuera del sandbox del espacio de trabajo previsto. Parte del curso de CMU: 18-739 Hackin...

Percino

Percino Loader Evasivo en Golang Percino es un loader en Golang que ejecuta shellcode utilizando la técnica de process hollowing con medidas anti-sandbox y anti-análisis. El shellcode está cifrado con el algoritmo de cifrado Triple DES 3DES. Bypass completo de EDR con cualquier framework C2...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway Puerta de enlace de seguridad en tiempo de ejecución para AI Agent: vincula criptográficamente cada llamada de herramienta a la finalización real del modelo, con ejecución de políticas de confianza cero, aislamiento en sandbox y aprobación humana...

cve-2026-22747-sandbox

test test1 test2 test3 test4 test5 test6 test7 test8 9 10 19 391211111111111...

CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

Yara-rules

Acerca de ¿Qué es esto? Un repositorio que contiene algunas de mis reglas Yara desarrolladas de forma privada. ¿Por qué? Para contribuir a la comunidad. ¿Puedo usar estas reglas? ¡Por supuesto! Para eso creé este repositorio. Puedes usarlas en tus sistemas de detección. Por ejemplo, CAPE sandbox,...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

CVE-2026-87654

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

CVE-2026-87650

A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox,...

CVE-2026-87646

A flaw was found in Google Chrome's Web Authentication component. A remote attacker could exploit a use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-87637

A flaw was found in Chromium, specifically within the Extensions component. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to significant compromise of the...

CVE-2026-87621

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

CVE-2026-87613

A flaw was found in Chromium Extensions. A remote attacker could exploit an incorrect reference resolution vulnerability by sending crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...