Lucene search
+L

22580 matches found

Kitploit
Kitploit
added 2026/09/07 10:08 p.m.5 views

CVE-2024-6778-POC

CVE-2024-5836 / CVE-2024-6778 This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within the Chromium web browser which allowed for a sandbox escape from a browser extension. To run these, you must be on a version of Chromium older tha...

8.8CVSS8.2AI score0.00788EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 9:50 p.m.5 views

CVE-2026-28995

CVE-2026-28995 Prueba de concepto para CVE-2026-28995 — Vulnerabilidad de path traversal en App Intents en iOS 26.4.2 y anteriores. Descripción Esta vulnerabilidad permite que una aplicación maliciosa lea cualquier archivo fuera de su sandbox mediante App Intents. La causa raíz es una validación ...

8.8CVSS6AI score0.00123EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 9:46 p.m.6 views

CVE-2025-21333

CVE-2025-21333 Puedes encontrar la primera versión del exploit para este CVE en https://github.com/MrAle98/CVE-2025-21333-POC/tree/master. Hice este nuevo exploit inspirado en el realizado por MrAle98. Es más estable y un poco rudimentario, ya que no abre el proceso de Windows Sandbox para obtene...

7.8CVSS8.2AI score0.09988EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/07 9:06 p.m.6 views

Presentations

Presentations Presentation| Slides| Video ---|---|--- BlueHat IL 2020 - Trinity: PSP Emulator Escape| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: Blu-ray Disc Java Sandbox Escape| 2022-hardwear-io-bd-jb.pdf|...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/07 8:25 p.m.9 views

CVE-2026-5843

CVE-2026-5843 PoC Minimal OCI registry that serves a malicious model to exploit the modelfile importlib execution path in mlx-lm. When Docker Model Runner loads the model for inference, model.py executes on the host as the logged-in user. Requires: Docker Desktop ≤ 4.70.x Apple Silicon with Model...

8.8CVSS5.9AI score0.00224EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 7:16 p.m.3 views

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – Escape de contenedor mediante enlace simbólico /proc/self/fd Resumen Un volumen compartido montado con propagación rshared permite que un contenedor malicioso cree un enlace simbólico que apunte a un archivo del host a través de /proc/self/fd. El proceso del host que escribe en el...

7.5CVSS7.4AI score0.00259EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 7:09 p.m.6 views

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Python tarfile Filter Bypass via PATHMAX Symlink Escape Arbitrary file write throughfilter="data" / filter="tar" extraction Table of Contents Overview Vulnerability Details How It Works Affected Versio...

9.4CVSS6.9AI score0.0143EPSS
SaveExploits14References7
Kitploit
Kitploit
added 2026/09/07 6:43 p.m.4 views

CVE-2022-0492-Container-Escape

CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Implemented in Go Reference links: https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...

7.8CVSS7.1AI score0.05528EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/07 6:35 p.m.9 views

CVE-2020-0041

CVE-2020-0041 This repository contains code for exploiting CVE-2020-0041, a bug we reported to Google in Decmeber 2019 and was fixed in the Android Security Bulletin from March 2020. You can find the sandbox escape exploit in sandbox/. The analysis of the bug and exploitation approach can be foun...

7.8CVSS7.7AI score0.03246EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/07 6:34 p.m.5 views

CVE-2023-27326

Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. The exploit was tested on Parallels Deskto...

8.2CVSS7.5AI score0.0126EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/07 5:46 p.m.4 views

CVE-2024-28397-js2py-Sandbox-Escape

介绍 分析 js2py是一个知名的python包,它可以在python解释器中执行JS代码。其经常用在各类爬虫中,用于解析网页的JS代码。 js2py的某个全局变量存在一个漏洞,攻击者可以使用这个漏洞在js代码中获得一个python对象的引用,使得攻击者可以逃逸js环境,在主机上执行任意命令。 用户一般会调用js2py.disablepyimport阻止JS代码使用pyimport调用python模块,从而防止代码沙盒逃逸。但是使用这个漏洞,攻击者可以绕过这个限制,在主机上执行任意代码。...

5.3CVSS7.5AI score0.04548EPSS
SaveExploits22References4
Kitploit
Kitploit
added 2026/09/07 5:26 p.m.7 views

CVE-2023-27326

Escape de máquina virtual de Parallels Desktop Este repositorio contiene un exploit para una vulnerabilidad de Parallels Desktop a la que se le ha asignado el CVE-2023-27326. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Parallels Desktop. El...

8.2CVSS7.7AI score0.0126EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/07 5:21 p.m.5 views

CVE-2026-2796-escape-wasm-by-using-wasm

CVE-2026-2796 — SpiderMonkey WebAssembly Sandbox Escape Proof-of-concept exploit chain for CVE-2026-2796 , a JIT miscompilation / type-confusion in Mozilla SpiderMonkey's WebAssembly import optimization "JavaScript: WebAssembly" component. A crafted wasm module obtains arbitrary read/write of the...

9.8CVSS8.4AI score0.00648EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 5:15 p.m.6 views

CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox escape on n8n JavaScript Task Runner via host-realm object leak...

9.9CVSS7AI score0.00729EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 5:11 p.m.5 views

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

7.1CVSS6AI score0.00325EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/07 4:10 p.m.4 views

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Escape de Invitado a Anfitrión Januscape es una vulnerabilidad del Kernel de Linux KVM causada por una condición de Use-After-Free UAF en la x86 Shadow MMU. Bajo configuraciones vulnerables, un invitado malicioso puede corromper ...

8.8CVSS6.4AI score0.00962EPSS
SaveExploits5
NVD
NVD
added 2026/09/07 3:17 p.m.1 views

CVE-2026-6377

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service Management allows Path Traversal. This issue affects CSM Customer Service Management: from 6.8.9 before 8.0.3...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 3:05 p.m.6 views

poc-cve-2024-0132

poc-cve-2024-0132 Entorno de reproducción: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Paso de reproducción: ejecutar la imagen del contenedor poc Objetivo: Acceder a archivos del host en el contenedor Llamar a las APIs del daemon de Docker a través del...

9CVSS7.9AI score0.40842EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/07 2:44 p.m.5 views

bluetoothdPoC

@RaniXCH bluetoothdPoC CVE-2018-4087 PoC ETA son? Is it a jailbreak? Depends, Got any kernel vulnerability? You're welcome chain them together. This one allow you to have huge attack surface from within the sandbox. https://www.weibo.com/ttarticle/p/show?id=2309404271293301154324 - @SparkZheng -...

9.3CVSS7.3AI score0.07213EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 2:28 p.m.7 views

CVE-2022-0847-Container-Escape

CVE-2022-0847-Container-Escape CVE-2022-0847 utilizado para lograr escape de contenedor. Utilizando CVE-2022-0847 Dirty Pipe para lograr escape de contenedor. Implementado usando el lenguaje Go...

7.8CVSS7.1AI score0.89721EPSS
SaveExploits101
Rows per page
Query Builder