cmdchamp

cmdchamp Bash CLI 训练器 — 从 ls 到权限提升，共 30 个关卡。 每个问题都要求你输入一条真实的命令 — 获得即时反馈，然后继续。答错时它不只是给你看答案：它会展示你的命令输出与期望输出之间的差异，对于管道命令还会显示每个阶段的输出行数，让你看到它在哪一步出了问题。对于文本匹配的问题，它会指出你的答案最接近哪个可接受答案，以及你遗漏的具体标志。用繁琐的方式答对后，它会展示简洁方式 — cat f | grep -c X 会得到 Shorter: grep -c X...

codejail

CodeJail CodeJail 用于在安全沙箱中管理不受信任代码的执行。它主要面向 Python 执行而设计，但也可以用于其他语言。 安全性通过 AppArmor 强制执行。如果你的操作系统不支持 AppArmor，或者 AppArmor 配置文件的定义和配置不正确，那么 CodeJail 将无法保护执行过程。 CodeJail 被设计为可配置的，如果你正确安装它，它将为 Python 执行自动进行配置。 一个 CodeJail 沙箱由以下几个部分组成： 沙箱环境。对于 Python 环境，这将是 Python 以及相关的核心包，构成一个 virtualenv。本文档中通称其为...

React2Shell-CVE-2025-55182

HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 A HackIndex.io sandbox environment for the React2Shell vulnerability. This will start a web app on port 3000, and a SSH server on port 2222. Start the environment root@kitploit: docker compose up --build --force-recreate SSH Web admin...

claude-pentest

claude-pentest A local pentesting toolkit built for Claude Co...

cybersecurity-exam-report

Cybersecurity Exam Project: ProFTPD Exploitation and MySQL Dat...

CVE-2026-9896

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-42308

A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service DoS condition, making the application unavailable. Mitigation To...

pocxgen-agent

PoCXGen Agent An LLM-orchestrated multi-agent pipeline for au...

CVE-2026-35477

InvenTree is an Open Source Inventory Management System. From 1.2.3 to 1.2.6, the fix for CVE-2026-27629 upgraded the PARTNAMEFORMAT validator to use jinja2.sandbox.SandboxedEnvironment. However, the actual renderer in part/helpers.py was not updated and still uses the non-sandboxed...

CVE-2026-33941

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler bin/handlebars / lib/precompiler.js concatenates user-controlled strings — template file names and several CLI options — directly into the JavaScript it...

Unspecified Vulnerability in HCL AION (CNVD-2026-15148)

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a security vulnerability that stems from untrusted file parsing operations not being performed in an isolated sandboxed environment, which can be exploited by an attacker to cause unexpected behavior when...

CVE-2025-14927

A flaw was found in the Hugging Face Transformers library. The convertconfig function fails to validate a user-supplied string before using it to execute Python code. An attacker can exploit this flaw by providing a malicious SEW-D model checkpoint, causing arbitrary code execution in the context...

EUVD-1999-0747

Malware in sbrugna...

EUVD-2011-4153

Malware in sbrugna...

EUVD-2019-2209

Malware in sbrugna...

EUVD-2024-51558

Malicious code in bioql PyPI...

EUVD-2024-3607

Malicious code in bioql PyPI...

EUVD-2024-42526

Malicious code in bioql PyPI...

CVE-2025-34146

A prototype pollution vulnerability exists in @nyariv/sandboxjs versions = 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code. This can result in a denial-of-service DoS condition or, under certain conditions, escape the sandboxed environme...

Cross-Site Scripting (XSS)

@pdfme/common is vulnerable to cross-site scripting XSS. The vulnerability is due to improper handling of expression evaluation, which allows an attacker to escape the sandbox environment and execute arbitrary code or manipulate object prototypes to perform XSS and other malicious actions...