CVE-2026-3102

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

CVE-2025-41242

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

CVE-2026-0745

⚠️ Security Research & Legal Disclaimer - CVE-2026-0745 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts i...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 PoC is explained here: https://databasesecurityninja.wordpress.com/2021/06/04/cve-2021-2173-pdb-isolation-is-broken-through-metadata-exposure/ Oracle Critical Patch Update Advisory - April 2021: https://www.oracle.com/security-alerts/cpuapr2021.html...

CVE-2026-24118

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

pigeon

Pigeon Ваш агент породил субагента и передал ему тот же API-ключ. Теперь этот субагент может разворачивать код в продакшене, читать базу данных платежей и делать merge в main. Pigeon это предотвращает. Вы выдаёте дочернему агенту Pigeon Pass — суженные, подписанные учётные данные для того, что ем...

onecli

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open...

yoloai

yoloAI Sandboxed runner for AI coding agents. No permission fatigue, no credentials in the box, no changes to your project until you approve them. AI coding agents work best with the guardrails off, and that's a terrible way to run them on your real machine. yoloAI gives the agent a disposable...

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

Securekit

Securekit Securekit protects what your models execute—across any AI system. Securekit is a protocol-agnostic security kernel for AI tool execution. It sits between any LLM or agent system and the tools they use, enforcing zero-trust execution, sandbox isolation, and policy-driven control. It is...

LavaDome

LavaDome 🌋️ A newLavaMoat tool for DOM nodes secured E ncapsulation ⚠️ EXPERIMENTAL WIP - USE AT YOUR OWN RISK learn more Demo Take a crack atLavaDome - visit the demo app, open the console, and do whatever in your power to steal the secret from within the LavaDome instance report your success...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...

CVE-2026-4282-Scanner

CVE-2026-4282-Scanner Неинтрузивный сканер уязвимостей на основе версии для CVE-2026-4282 , затрагивающей Keycloak и Red Hat Build of Keycloak RHBK. ⚠️ Отказ от ответственности: Этот инструмент предназначен строго для авторизованных исследований в области безопасности, тестирования на проникновени...

CVE-2020-17057

I wrote this exp based on this blog（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），But I ended up with only palette objects with dangling data pointer. Because of type isolation, I can't get arbitrary R/W primitives by using palettes or bitmap objects，If you have a way to...

CVE-2026-11114-Node.js-vm-Sandbox-Escape-via-Proxy

CVE-2026-11114 – Node.js vm Sandbox Escape via Proxy Program Code Node.js // sandboxserver.js - Vulnerable VM sandbox const vm = require'vm'; const express = require'express'; const app = express; app.useexpress.json; app.post'/eval', req, res = const code = req.body.code; const sandbox = console...

Cordon

Cordon ⚠️ PROJECT DEPRECATED Development on this project has been stopped because someone else was working on the same idea and built a better solution. We highly recommend checking out:Fence by Use-Tusk. Note: This repository was originally created forFOSS HACK 2026 , though we unfortunately...

agentZ

제로 트러스트 에이전틱 AI 플랫폼 AI 에이전트를 구축하고, 실행하고, 관리하세요. 설계 단계부터 안전하게. 모든 에이전트는 기본 거부 샌드박스 내에서 실행되며 자격 증명을 절대 받지 않습니다. 모든 에이전트 작업은 추적 가능합니다. AgentZ는 AI 에이전트를 실행하기 위한 멀티테넌트 플랫폼입니다. 강력한 격리 보장, 에이전트에 대한 자격 증명 노출 제로, 기본 거부 네트워크 태세, 그리고 에이전트가 접근할 수 있는 소프트웨어 패키지에 대한 제어를 제공합니다. 웹사이트 : AgentZ 랜딩 페이지. DeepWiki :...