malware-jail

malware-jail Песочница для полуавтоматического анализа JavaScript-вредоносов, деобфускации и извлечения полезной нагрузки. Написана для Node.js. malware-jail написана для песочницы 'vm' от Node. В настоящее время реализует контекст WScript Windows Scripting Host env/wscript.js, по крайней мере ту...

AgentGuard

AgentGuard 面向自主AI代理的零信任沙箱。 AgentGuard 可以用安全护盾包裹任何 AI 代理（LangChain、CrewAI、AutoGen、自定义脚本）。只需改变一个命令： root@kitploit: 之前（危险——代理具有完全系统权限） python myagent.py 之后（沙箱化） agentguard run -- python myagent.py AgentGuard 拦截代理发出的每条 shell 命令、文件修改和网络请求。安全操作自动放行，危险操作自动拦截，其余操作则提示人类审批。 工作原理 AgentGuard 有四层防御层协同工作：...

Z-Jail

Z-Jail Linux上でのネイティブコード実行のためのマルチレイヤーサンドボックス。 7つの独立した防御層 — 外部依存関係なし、約73 KiBのPIEバイナリ。 root@kitploit: ┌──────────────────────────────────────────────────────┐ │ Z-Jail │ ├──────────────────────────────────────────────────────┤ │ Truthimatics PV エビデンスベースの判定エンジン │ │ Namespaces mount, pid, net, ipc, ut...

nginx-ultimate-bad-bot-blocker

저장소| 스폰서가 되세요 ---|--- | 후원자가 되시면 귀하의 로고와 도메인 링크가 이곳에 표시됩니다. 이 프로젝트를 후원하고 싶다면 [email protected]으로 이메일을 보내주세요. 남아프리카공화국은 아직 GitHub 후원 프로그램에서 지원되지 않습니다. | 저를 후원해 주세요: https://ko-fi.com/mitchellkrog Nginx 악성 봇 및 사용자 에이전트 차단기, 스팸 리퍼러 차단기, Anti DDOS, 악성 IP 차단기 및 Wordpress 테마 탐지 차단기 Nginx 악성 봇, 사용자...

CVE-2026-58086

FreeBSD 15.0 and 15.1 are affected by a privilege validation flaw in the ktrace(2) facility. An unrelated code change inadvertently caused PRIV_KTRACE to always be denied to a jailed root user, meaning tracing configured by that user was not flagged as privileged. As a result, an unprivileged use...

EUVD-2026-62340

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

CVE-2026-49419

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...

CVE-2026-49419

FreeBSD 15.0+ kernel contains a double-free bug in kern_jail_set() and kern_jail_get(): when the JAIL_AT_DESC flag is used, the caller's current prison reference is released before descriptor lookup, then released again on error paths. An unprivileged local user can trigger a prison reference cou...

EUVD-2026-62231

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...

CVE-2026-49419 Jail reference count underflow

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...

GHSA-CXGV-HP74-JJ7R Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was operated on outside the jail, so a symlink existing inside the...

Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was operated on outside the jail, so a symlink existing inside the...

FreeBSD : FreeBSD -- Jail reference count underflow (a65c31d1-74e0-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a65c31d1-74e0-11f1-958d-bc241121aa0a advisory. When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller...

PT-2026-70014

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description An issue exists in the kern jail set and kern jail get functions when the JAIL AT DESC flag is used. The system releases the reference to the caller's current prison before searching for the...

FreeBSD-SA-26:38.jail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:38.jail Security Advisory The FreeBSD Project Topic: Jail reference count underflow Category: core Module: jail Announced: 2026-06-30 Credits: Yuxiang Yang,...

FreeBSD -- Jail reference count underflow

Problem Description: When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. Impact: An...

EUVD-2026-39776

When used to deliver a signal to a specific thread, thrkill22 called pcansignal to determine whether the operation was permitted but did not check the result before delivering the signal. The signal was sent even when the permission check failed. The system call returned the resulting error to th...

CVE-2026-45256

When used to deliver a signal to a specific thread, thrkill22 called pcansignal to determine whether the operation was permitted but did not check the result before delivering the signal. The signal was sent even when the permission check failed. The system call returned the resulting error to th...

CVE-2026-45256 Missing permission check in thr_kill2(2)

When used to deliver a signal to a specific thread, thrkill22 called pcansignal to determine whether the operation was permitted but did not check the result before delivering the signal. The signal was sent even when the permission check failed. The system call returned the resulting error to th...

CVE-2026-45256

CVE-2026-45256 affects FreeBSD thr_kill2(2). The kernel failed to verify the result of p_cansignal() before delivering a signal, allowing unprivileged local users who know target PIDs to signal processes they normally could not, including root-owned ones. This can lead to stopping or terminating ...