NashaVM

NashaVM - Máquina Virtual Sharp Nativa Nasha es una Máquina Virtual para archivos .NET y su runtime fue creado en C++/CLI Instalación git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Dependencias dnlib .NET Framework Redistribuible de Visual C++...

CVE-2025-59528-POC

CVE-2025-59528 - Ejecución Remota de Código en FlowiseAI CustomMCP CVSS 10.0 Crítico | RCE Ciego | FlowiseAI Flowise = 2.2.7-patch.1 y 3.0.6 Resumen Una vulnerabilidad crítica de ejecución remota de código en el nodo CustomMCP de FlowiseAI Flowise. La función convertToValidJSONString pasa la...

openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21999-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21999-1 advisory. Changes in rclone: - Update to version 1.75.1: boo1279548 - Security - archive - Fix zip slip path traversal in untrusted zip files...

moc3ingbird

Future Work Future work in this space will occur under theSakura Motion organization, beginning with our Core rewrite: https://github.com/SakuraMotion/PurismCore. MOC3ingbird DoS 日本語版：READMEJA.md This repository contains a simple Live2D model that crashes any application that attempts to load it:...

CVE-2026-31431-exploit

CVE-2026-31431 WARNING These Linux LPE exploit implementations are runtime-destructive. They overwrite the live page-cache view of privileged targets such as: su PAM configuration files any file passed into patch mode This is usually not a normal persistent on-disk edit, but it does change runtim...

agentbox

🛡️ AgentBox The open-source sandboxed runtime for AI agents Run AI agents with confidence. Every agent gets its own permission scope, credential vault, audit trail, and kill switch. Why AgentBox exists On January 27, 2026, CVE-2026-25253 became the first CVE ever assigned to an agentic AI system. ...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

HARDE

HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control Code release for HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control. The repository contains two complementary entry-point families: domains/: the Meta-Harness baseline and the two...

pypdf: Possible long runtimes with large amount of embedded files

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 4081...

PYSEC-2026-4159 pypdf: Possible long runtimes with large amount of embedded files

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4081...

sentrymcp

sentrymcp A static + runtime security scanner for MCP Model Context Protocol servers. Between January and April 2026, security researchers disclosed 40+ CVEs across MCP server implementations, and a 2026 Endor Labs scan of public MCP servers found 82% vulnerable to at least one OWASP MCP Top 10...

OpenPLC_v3

OpenPLC Runtime version 3 ⚠️ This project has reached End of Life and is no longer maintained. It has been replaced by OpenPLC Runtime v4. Please visit the new repository for installation instructions, documentation, and support. OpenPLC is an open-source Programmable Logic Controller that is base...

CVE-2024-50340

CVE-2024-50340 POC Requirements The registerargcargv option must be enabled in the PHP configuration file php.ini. This setting loads command-line arguments and query params into $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv Explanation of Vulnerable Code This...

CVE-2019-5736-Custom-Runtime

CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implemented using a shallow, self-written container runtime to understand the exploit. Exploit is based on and almost all copied from the runc-poc by twistlock: https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC Contain...

CVE-2024-21626-POC

CVE-2024-21626-POC Instrucciones de uso Solo para fines educativos/de investigación. Cualquier comportamiento no relacionado con la educación/investigación es bajo su propio riesgo. Uso docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy No...

OpenPLC_v3

OpenPLC Runtime versión 3 Introducción OpenPLC es un controlador lógico programable de código abierto basado en software fácil de usar. Nuestro enfoque es proporcionar una solución industrial de bajo costo para automatización e investigación. OpenPLC se ha utilizado en numerosos artículos de...

cve-2019-5736-poc

CVE-2019-5736 Prueba de Concepto Esto agrega una cadena al binario runc del host. Trae tu propio payload ver stage2.c. Para ejecutar: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

CLEANSTART-2025-OR85349 .NET and Visual Studio Remote Code Execution Vulnerability

Security vulnerability affects the dotnet8-runtime package...

openclaw-defender

openclaw-defender Marco de seguridad integral que protege a los agentes de OpenClaw contra ataques a la cadena de suministro de skills descubiertos en la investigación ToxicSkills de Snyk Feb 2026. Repositorio: https://github.com/nightfullstar/openclaw-defender — las actualizaciones de la lista d...

Rocky Linux 9.6 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (ciqsa-2026_1475)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261475 advisory. This advisory aggregates security fixes for the dotnet9.0 SRPM in CIQ LTS 9.6. It addresses 17 CVEs: CVE-2026-47300, CVE-2026-47302, CVE-2026-47303,...