TimeAfterFree

TimeAfterFree PHP 8 sandbox escape PoC demonstrating a disablefunctions bypass on Unix-like systems. This exploit leverages a use-after-free bug to bypass disablefunctions and execute system commands. The exploitation techniques used for leaking heap pointers and obtaining read/write primitives...

iOS-Rat-chain-26.3.1-27.1

This is a tested and working exploit - I have deliberately alter...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

Crawl4AI <= 0.8.6 - Remote Code Execution

Crawl4AI through 0.8.6 ships a Docker API server that exposes an unauthenticated /crawl endpoint. The computed field type of JsonCssExtractionStrategy evaluates a user supplied expression inside an AST based sandbox that does not restrict attribute access on generator frame objects. A generator...

ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE

ServiceNow AI Platform Brazil, Australia, Zurich, and Yokohama releases before patching contains a pre-authentication remote code execution vulnerability. The /assessmentthanks.do endpoint passes the sysparmassessabletype parameter into GlideRecord's addQuery, which evaluates "javascript:" prefix...

CVE-2026-121224

A security issue flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574922421 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...

CVE-2026-121178

An use after free flaw was found in the Aura component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570029317 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of a...

CVE-2026-121098

An improper state validation flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/516958782 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-121090

An improper privilege management flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936993 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending...

CVE-2026-121071

An incorrect authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561994040 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-121060

An incorrect authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/578500839 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-121189

An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/555547989...

CVE-2026-121241

An use after free flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574791491 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the applicatio...

DEBIAN-CVE-2026-121256

Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121256

Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-121224

Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-121224

Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

DEBIAN-CVE-2026-121219

Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...