45 matches found
react2shell-poc
日本語 !CAUTION For Authorized Security Re...
ethical-hacking-lab-reports
Ethical Hacking & Information Security Lab Reports !Security...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
ROS-20251202-05
A vulnerability in the DevTools component of the Google Chrome browser is related to an access control flaw in an isolated environment. of an isolated environment. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the sandbox protection mechanism. sandbox...
0-DAY
0-DAYzero-day !Repo Statushttps://img.shields.io/badge/...
The vulnerability of the Views component in Google Chrome allows a hacker to escape from an isolated environment.
The vulnerability of the Views component in Google Chrome is related to improper implementation. Exploiting this vulnerability can allow an attacker to escape from a isolated environment using a specially crafted HTML page...
5 Must-Have Tools for Effective Dynamic Malware Analysis
Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor its behavior and gather actionable indicators. Effective analysis must be fast, in-depth, and precise. These five...
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allow attackers to escape from a isolated software environment.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to data type mixing errors. Exploiting these vulnerabilities can allow a malicious actor to gain control and execute actions from an isolated software environment...
The vulnerability of the interpreter for Ghostscript software, which handles the processing, conversion, and generation of documents, relates to the execution of operations beyond the buffer boundaries in memory. This vulnerability allows an attacker to escape from the isolated software environment.
The vulnerability of the interpreter for software used to process, transform, and generate Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to escape from the isolated software environment...
GHSA-PX7W-C9GW-7GJ3 Apache James server: Privilege escalation via JMX pre-authentication deserialization
Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JM...
The vulnerability of the Scalefusion MDM Agent, a software tool for managing endpoints, stems from deficiencies in access control. This vulnerability allows a malicious individual to escape from the isolated software environment.
The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain access to the isolated software environment...
ROS-20231114-01
A vulnerability in the Blink Media component of the Google Chrome browser is related to memory usage after it has been after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the Blink Frames component of Goog...
The vulnerability of the handleException() function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. This allows a malicious user to exit from a isolated programming environment and execute arbitrary code.
The vulnerability of the handleException function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. Exploiting this vulnerability can allow a remote attacker to exit from a isolated programming environment and execute arbitrary code...
The vulnerability of Google Chrome’s Skia library allows a hacker to escape from the isolated software environment and execute arbitrary code.
The vulnerability of Google Chrome’s Skia library is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to escape from a isolated software environment and execute arbitrary code...
The vulnerability of the source code transformer in the vm2 package manager NPM allows a hacker to escape from a isolated programming environment and execute arbitrary code.
The vulnerability of the source code transformer in the vm2 package manager NPM is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a malicious actor to exit from a isolated software environment and execute arbitrary code...
Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library
The maintainers of the vm2 JavaScript sandbox module have shipped a patch to address a critical flaw that could be abused to break out of security boundaries and execute arbitrary shellcode. The flaw, which affects all versions, including and prior to 3.9.14, was reported by researchers from Sout...
4 Steps to Creating a Powerful Research Lab for Reverse Engineering
However, manual lab setup and configuration can prove to be a laborious and time-consuming process. In this article, we'll look at 4 ways to create a reverse engineering lab, discuss how to save time, and, potentially, improve the detection rate using a sandbox-as-a-service, and a recommended lis...
Delay with enumerating resources after logging in to Citrix Workspace App during first login
In an isolated environment where there is no access to external sites ,there is delay when adding account/store in Workspace App...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
cve-2022-44268-detector - detect malicious PNGs cve-2022-4426...