goBox

goBox 신뢰할 수 없는 코드를 실행하기 위한 GO 샌드박스입니다. goBox는 Ptrace를 사용하여 READ 시스템 콜에 후킹하여, 실행 전에 시스템 콜을 허용하거나 거부할 수 있는 옵션을 제공합니다. 사용법 Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking file reads. -y value A glob pattern for automatically allowing fi...

codejail

CodeJail CodeJail は、信頼されないコードをセキュアなサンドボックス内で実行するための管理を行います。主に Python の実行用に設計されていますが、他の言語でも使用できます。 セキュリティは AppArmor によって強化されます。お使いのオペレーティングシステムが AppArmor をサポートしていない場合、または AppArmor プロファイルが正しく定義・設定されていない場合、CodeJail は実行を保護しません。 CodeJail は設定可能なように設計されており、適切にインストールすれば Python 実行用に自動設定されます。 CodeJail...

capsule

Capsule 시작하기 • 문서 • 이슈 • 기여하기 개요 Capsule은 신뢰할 수 없는 코드를 격리된 환경에서 실행하기 위한 런타임입니다. 각 태스크는 자체 WebAssembly 샌드박스 내에서 실행되며, 다음을 제공합니다: 격리된 실행 : 각 태스크가 호스트 시스템으로부터 격리되어 실행됩니다 리소스 제한 : 태스크별로 CPU, 메모리, 타임아웃 제한을 설정할 수 있습니다 자동 재시도 : 수동 개입 없이 실패를 처리합니다 생명 주기 추적 : 실행 중, 완료됨, 실패 상태를 모니터링할 수 있습니다 작동 방식 Python 사용...

vm2

vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 は、ホワイトリストに登録された Node の組み込みモジュールを使用して信頼できないコードを実行できるサンドボックスです。 インストールsh npm install vm2 クイック例js import VM from 'vm2'; const vm = new VM;...

sandboxec

sandboxec Landlock 기반의 Linux용 경량 명령 샌드박스입니다. 데몬 불필요. 루트 불필요. 이미지 빌드 단계 불필요. 위험한 명령을 더 좁은 폭발 반경으로 실행하는 데 사용하세요: 서드파티 CLI, 신뢰할 수 없는 스크립트, 생성된 코드, 일회성 도구. 목적 신뢰할 수 없는 코드를 실행하는 것은 종종 모든 것 또는 아무것도 아닌 선택입니다. 컨테이너와 VM은 훌륭한 도구이지만, 빠른 명령 수준 격리에는 과할 수 있습니다. 컨테이너는 이미지 및 런타임 오버헤드를 추가합니다. VM은 더 강력한 격리를 제공하지만 ...

ephemora-cell

Ephemora Cell Ephemora Cellは、AIエージェント、MCPツール、プラグイン、およびアプリケーション内で信頼できないコードを実行するための軽量なセキュリティおよび実行プリミティブです。 Run untrusted code. Control its capabilities. Bound its resources. Record what happened. AIエージェント、MCPツール、プラグイン、コードインタプリタ、その他の信頼できないワークロード 向けに構築されています。 AI Agent / Application │ ▼ Tool / Plugin ...

Rocky Linux 9 [CIQ] Security Update: doxygen / doxygen-debuginfo / doxygen-debugsource / etc (crlsa-2025_1329)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251329 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (crlsa-2021_4142)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214142 advisory. jquery: Cross-site scripting XSS via HTML tags containing whitespaces CVE-2020-7656 jquery: Untrusted code execution via tag in HTML passed to DOM...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-13-gcc / gcc-toolset-13-gcc-c++ / etc (crlsa-2025_1306)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251306 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: cpp / cpp-debuginfo / gcc / gcc-c++ / gcc-c++-debuginfo / etc (crlsa-2025_1301)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251301 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

CVE-2020-11022-CVE-2020-11023

CVE-2020-11022 CVE-2020-11023 jQuery 버전 1.2 이상, 3.5.0 미만에서 신뢰할 수 없는 소스의 HTML살균 처리 후에도을 jQuery의 DOM 조작 메서드예: .html, .append 등에 전달하면 신뢰할 수 없는 코드가 실행될 수 있습니다. 이 문제는 jQuery 3.5.0에서 패치되었습니다. jQuery 버전 1.0.3 이상, 3.5.0 미만에서 신뢰할 수 없는 소스의 요소를 포함한 HTML살균 처리 후에도을 jQuery의 DOM 조작 메서드예: .html, .append 등에 전달하면...

CVE-2026-6935

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000317 advisory. Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GU...

codejail v4.1.1

CodeJail CodeJail manages execution of untrusted code in secure sandboxes. It is designed primarily for Python execution, but can be used for other languages as well. Security is enforced with AppArmor. If your operating system doesn't support AppArmor, or if the AppArmor profile is not defined a...

CVE-2026-77147

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. The supported versions affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. This easily exploitable vulnerability allows a low-privilege...

Astra Linux – Vulnerability in Golang-1.19

The go command may execute arbitrary code during compilation when using cgo. This can occur when running “go get” on a malicious module, or when running any other command that compiles unauthorized code. This issue can be triggered by linker flags, specified via the cgo LDFLAGS directive. Flags...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, and Oracle GraalVM for JDK products of Oracle Java SE component: Networking. The supported versions affected by this vulnerability are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3....

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: 2D. The supported versions affected by this vulnerability are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK:...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. The supported versions affected by this vulnerability are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. The vulnerability is difficult t...