malware-jail

malware-jail Sandbox para análise semi-automática de malware JavaScript, desofuscação e extração de payload. Escrito para Node.js malware-jail é escrito para a sandbox 'vm' do Node. Atualmente implementa o contexto WScript Windows Scripting Host env/wscript.js, pelo menos a parte frequentemente...

CVE-2024-34313

CVE-2024-34313 Descrizione È stato scoperto che VPL Jail System fino alla v4.0.2 contiene una vulnerabilità di Path Traversal che consente la sovrascrittura arbitraria di file e, di conseguenza, l'escalation dei privilegi all'utente root. Questa vulnerabilità può essere combinata con CVE-2024-343...

CVE-2024-48208

CVE-2024-48208 Das Repository enthält alle Arbeiten rund um die Entwicklung des PoC dafür, wie ein einfacher OOB Out-of-Bound Read zu Jail Escapes sowie zu gebrochener Zugriffskontrolle führen kann. Über die Schwachstelle Die ursprüngliche CVE-Beschreibung lautet wie folgt: Der Github PR im...

Z-Jail

Z-Jail Sandbox multistrato per l'esecuzione di codice nativo su Linux. Sette livelli di difesa indipendenti — nessuna dipendenza esterna, binario PIE di circa 73 KiB. root@kitploit: ┌──────────────────────────────────────────────────────┐ │ Z-Jail │...

AgentGuard

AgentGuard Sandbox a fiducia zero per agenti AI autonomi. AgentGuard avvolge qualsiasi agente AI LangChain, CrewAI, AutoGen, script personalizzati con binari di sicurezza. Con un solo cambiamento di comando: root@kitploit: Before dangerous — agent has full system access python myagent.py After...

nginx-ultimate-bad-bot-blocker

REPO| DIVENTA UNO SPONSOR ---|--- | Il tuo logo e il link al tuo dominio appariranno qui se diventi uno sponsor. Basta inviarmi un'email a [email protected] se desideri sponsorizzare questo progetto, dato che il Sudafrica non è ancora supportato dal programma sponsor di Github. | Aiutami a...

CVE-2026-58086

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

CVE-2026-58086

FreeBSD 15.0 and 15.1 are affected by a privilege validation flaw in the ktrace(2) facility within jails. Due to an unrelated code change, PRIV_KTRACE was always denied to a jailed root user, so tracing they configured was not flagged as privileged. As a result, an unprivileged user in the same j...

EUVD-2026-62340

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

CVE-2026-58086 ktrace(2) privilege incorrectly validated in jails

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

CVE-2026-49419

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...

CVE-2026-49419

FreeBSD 15.0+ kernel contains a double-free bug in kern_jail_set() and kern_jail_get(): when the JAIL_AT_DESC flag is used, the caller's current prison reference is released before descriptor lookup, then released again on error paths. An unprivileged local user can trigger a prison reference cou...

EUVD-2026-62231

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...

CVE-2026-49419 Jail reference count underflow

When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...

GHSA-CXGV-HP74-JJ7R Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was operated on outside the jail, so a symlink existing inside the...

Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was operated on outside the jail, so a symlink existing inside the...

FreeBSD : FreeBSD -- Jail reference count underflow (a65c31d1-74e0-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a65c31d1-74e0-11f1-958d-bc241121aa0a advisory. When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller...

PT-2026-70014

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description An issue exists in the kern jail set and kern jail get functions when the JAIL AT DESC flag is used. The system releases the reference to the caller's current prison before searching for the...

FreeBSD-SA-26:38.jail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:38.jail Security Advisory The FreeBSD Project Topic: Jail reference count underflow Category: core Module: jail Announced: 2026-06-30 Credits: Yuxiang Yang,...

FreeBSD -- Jail reference count underflow

Problem Description: When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. Impact: An...