56 matches found
CVE-2025-39965
면책 조항 제공된 모든 콘텐츠는 교육 및 연구 목적으로만 사용됩니다. 모든 테스트는 안전하고 격리된 환경의 Linux 커널 에뮬레이터에서만 수행되었습니다. 이 연구 과정에서 타인이 소유한 프로덕션 시스템이나 장치는 관여하거나 영향을 받지 않았습니다. 저자는 제시된 정보의 오용이나 그 적용으로 인한 어떠한 손해에 대해서도 책임을 지지 않습니다. 블로그 https://streypaws.github.io/posts/Dissecting-a-1-Day-Vulnerability-in-Linux-XFRM-Subsystem/...
CVE-2026-43499
CVE-2026-43499 ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하십시오: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 설정 승인된 침투 테스트 환경 예시 설정: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bas...
CVE-2026-46331
cve-id ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 허가된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 예시 설정: git clone cd 프로젝트는 Python을 사용하므로 아래를 따르세요 가상 환경 생성 python -m venv venv 가상 환경 활성화 macOS / Linux source venv/bin/activate Windows Git Bash / WSL source venv/Scripts/activate 의존성 설치 pip install ...
Pentest-Home-Lab
Pentest Home Lab A personal cybersecurity home lab for practi...
RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery
Cross-Site Scripting XSS remains one of the most prevalent and damaging classes of web vulnerabilities. LLM-based coding agents offer a promising approach to XSS discovery by combining source-code reasoning with interactive testing against a running application. However, a coding agent's claims...
Bug-Bounty-Practice-lab
Syntex Solutions — Vulnerable Lab ⚠️ WARNING — FOR AUTHOR...
react2shell-poc
日本語 !CAUTION For Authorized Security Re...
ethical-hacking-lab-reports
Ethical Hacking & Information Security Lab Reports !Security...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SandboxJS library, related to improper code generation management, allows a violator to escape from the isolated programming environment.
The vulnerability of the SandboxJS library is related to improper handling of code generation. Exploiting this vulnerability can allow a remote attacker to escape from an isolated programming environment...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agent runtimes like OpenClaw are showing up fast in enterprise pilots, and they introduce a blunt reality: OpenClaw includes limited built-in security controls. The runtime can ingest untrusted text, download and execute skills i.e. code from external sources, and perform actions usin...
ROS-20251202-05
A vulnerability in the DevTools component of the Google Chrome browser is related to an access control flaw in an isolated environment. of an isolated environment. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the sandbox protection mechanism. sandbox...
0-DAY
0-DAYzero-day !Repo Statushttps://img.shields.io/badge/...
The vulnerability of the isolated Sandbox software environment in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows a hacker to bypass the sandbox protection mechanism.
The vulnerability of the isolated Sandbox software environment in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to bypass the sandbox’s security mechanisms...
The vulnerability of the Views component in Google Chrome allows a hacker to escape from an isolated environment.
The vulnerability of the Views component in Google Chrome is related to improper implementation. Exploiting this vulnerability can allow an attacker to escape from a isolated environment using a specially crafted HTML page...
5 Must-Have Tools for Effective Dynamic Malware Analysis
Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor its behavior and gather actionable indicators. Effective analysis must be fast, in-depth, and precise. These five...
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allow attackers to escape from a isolated software environment.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to data type mixing errors. Exploiting these vulnerabilities can allow a malicious actor to gain control and execute actions from an isolated software environment...
The vulnerability of the interpreter for Ghostscript software, which handles the processing, conversion, and generation of documents, relates to the execution of operations beyond the buffer boundaries in memory. This vulnerability allows an attacker to escape from the isolated software environment.
The vulnerability of the interpreter for software used to process, transform, and generate Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to escape from the isolated software environment...
GHSA-PX7W-C9GW-7GJ3 Apache James server: Privilege escalation via JMX pre-authentication deserialization
Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation. Note that by default JM...