167 matches found
lfi
轻量级故障隔离 LFI 欢迎来到轻量级故障隔离（LFI）项目的顶级仓库。 什么是 LFI？ LFI 是一个用于沙箱化原生代码的系统。与 WebAssembly 和 Native Client 类似，LFI 在进程内（即与宿主应用程序相同的地址空间）隔离沙箱化代码。目前，我们支持 Arm64 和 x86-64 目标，并有实验性的 RISC-V 支持。 LFI 从底层设计用于沙箱化现有代码，例如 C/C++ 库（包括汇编代码）和设备驱动程序。 LFI 追求以下目标： 兼容性：LFI 可用于沙箱化几乎所有现有的 C/C++/汇编代码而无需修改，可与现有系统调用接口配合等。 性能：LFI...
macos_sandbox
Introducción a macOS: el sandbox de las Apps Continuando con mi serie de publicaciones sobre mi transición a macOS, me gustaría hablar un poco sobre el sandbox de Apps de macOS. Se recomienda encarecidamente leer primero la publicación macOS App structure: asumiré que el lector sabe la diferencia...
aquaman
🔱 Aquaman 🔱 唯一独立的AI代理凭证代理：自带保险库隔离与最小权限请求策略。你的密钥始终保存在你已存放的位置，永远不会进入代理的内存。兼容 1Password、keychain、keepassxc 等众多工具。 你配置好了 Claude Code、OpenClaw 或 Hermes，然后盯着那些明文存放宝贵 API 密钥的 .env 文件。你读过相关文章，知道当代理遭受提示注入时会发生什么。我们理解。 Aquaman 通过三层防御机制解决这一问题： 1. 进程隔离 ：API...
CVE-2026-74960
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...
UBUNTU-CVE-2026-74986
Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74895 openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation
opensslencrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules...
CVE-2026-74895
openssl_encrypt (Python package) versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution, allowing attackers to run malicious plugins with unrestricted filesystem, network, subprocess, and Python module access (CVSS 9.8 CRITICAL). No in-...
CVE-2026-74895 openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation
opensslencrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules...
EUVD-2026-60114
opensslencrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules...
firefox: thunderbird: Site isolation issue in the Networking: HTTP component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: HTTP component...
jfp-console-poc
JFP Console PoC Tamper-evident autonomous system governor w...
CVE-2026-41155 GPU DDK - SharedSecMem mapped into all GPU virtual address spaces
An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process leading to image corruption / GPU hardware recover...
PT-2026-48814
Name of the Vulnerable Software and Affected Versions MessagePack for C versions prior to 2.5.301 MessagePack for C versions prior to 3.1.7 Description An issue exists in the optional LZ4 decompression path used by compression modes Lz4Block and Lz4BlockArray. The decoder uses a deprecated...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper restrictions on the opening of the /sys/fs/selinux/policy file in SELinux. This...
protobuf.js: Denial of service through unbounded protobuf recursion
Summary protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of nested message fields. A crafted protobuf binary payload could cause the JavaScript call stack to be exhausted during decoding...
CVE-2026-41564
CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A...
MiracleLinux 7 : firefox-128.10.0-1.0.2.el7.AXS7 (AXSA:2025-9956:15)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9956:15 advisory. firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing...
TencentOS Server 4: mozjs (TSSA-2025:0366)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0366 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: thunderbird (TSSA-2025:0395)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0395 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...