rustnet

RustNet مراقبة شبكة لكل عملية على حدة في طرفيتك: اتصالات TCP وUDP وQUIC حية مع فحص عميق للحزم، معزولة افتراضيًا. English | 简体中文 | 日本語...

flatpak

Flatpak ist ein System zum Erstellen, Verteilen und Ausführen von abgeschotteten Desktop-Anwendungen unter Linux. Siehe https://flatpak.org/ für weitere Informationen. Flatpak ist in den Paketquellen der meisten Linux-Distributionen verfügbar und kann von dort installiert werden. Siehe...

see

Ambiente di Esecuzione in Sandbox :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Download: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

iron-proxy

iron-proxy Das Problem CI-Jobs, KI-Codierungsagenten und sandboxed Container können beliebige ausgehende Anfragen stellen. Eine kompromittierte Abhängigkeit, eine Prompt-Injection oder ein bösartiger Build- Schritt kann Geheimnisse exfiltrieren, sich nach Hause telefonieren oder eine Reverse Shel...

DEBIAN-CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

DEBIAN-CVE-2026-79197

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-79119

Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2018-17463

CVE-2018-17463 Proof of Concept funzionante per l'exploit di CVE-2018-17463 che utilizza pagine RWX di WebAssembly per l'esecuzione di shellcode. CVE-2018-17463 è nata da un'annotazione errata degli effetti collaterali in V8 in Google Chrome precedente alla versione 70.0.3538.64, consentendo a un...

cve-2018-12386

Exploit RCE in Sandbox di Firefox CVE-2018-12386 Ecco un semplice exploit per la vulnerabilità CVE-2018-12386 scoperta da Niklas Baumstark, Samuel Groß e Bruno Keith. Questo è principalmente un PoC che ho realizzato per divertimento, non c'è alcun bypass della sandbox e funzionerà solo su una...

webvm

WebVM Este repositório hospeda o código-fonte para https://webvm.io, uma máquina virtual Linux que roda no seu navegador. Experimente o novo ambiente gráfico Alpine / Xorg / i3: https://webvm.io/alpine.html WebVM é um ambiente virtual sem servidor que roda completamente no lado do cliente em...

cve-2018-12386

Exploit RCE in Sandbox di Firefox CVE-2918-12386 Ecco un semplice exploit per la vulnerabilità CVE-2018-12386 trovata da Niklas Baumstark, Samuel Groß e Bruno Keith. Questo è principalmente un Poc che ho fatto per divertimento, non c'è alcun bypass della sandbox e funzionerà solo su una specifica...

CVE-2026-80198

Kimai versions before 2.56.0 fail to properly restrict the config() Twig function within sandboxed invoice and export templates. This allows users with admin privileges to upload malicious templates that read arbitrary configuration keys, potentially exfiltrating sensitive server-wide secrets suc...

CVE-2026-57170

compliance-trestle (Trestle), a Python SDK for managing OSCAL compliance documents, is vulnerable to server-side template injection in versions prior to 3.12.4 and 4.0.0 through 4.0.3. The custom Jinja2 include tags (mdsection_include and md_clean_include) re-parse included Markdown file content ...

CVE-2026-54757

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79187

Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79119

Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-78938

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2013-2729

Adobe Reader BMP/RLE Heap-Korruption – CVE-2013-2729 Adobe Reader X ist eine leistungsstarke Softwarelösung von Adobe Systems zum Anzeigen, Erstellen, Bearbeiten, Drucken und Verwalten von Dateien im Portable Document Format PDF. Seit Version 10 enthält es den geschützten Modus, eine...