EUVD-2026-93793

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106358

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-93795

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

A Use after free vulnerability in the Chromecast component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. The attack can be initiated by navigating to a crafted HTML page . No specific exploit links or details are provid...

CVE-2026-106197

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106197

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-93794

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106197

A Use after free vulnerability exists in the Google Chrome browser in versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by navigating the user to a crafted HTML page . While the severity is rated as Critical , no specific exploit li...

CVE-2026-106358

A Use after free vulnerability exists in the Navigation component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by interacting with a crafted HTML page. The security severity is rated as Critical . Remediation is...

CVE-2026-34926

⚠️ Исследования в области безопасности и юридический отказ от ответственности 📌 Цель этого репозитория Этот репозиторий предоставлен строго для образовательных, академических и авторизованных исследовательских целей в области кибербезопасности. Он предназначен для содействия пониманию: Уязвимостей...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

firefox: Sandbox escape due to use-after-free in the DOM: Security component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

firefox: Sandbox escape due to use-after-free in the DOM: Navigation component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...

CVE-2026-40217-PoC

CVE-2026-40217 — Обход песочницы Guardrail в LiteLLM LiteLLM POST /guardrails/testcustomcode — Обход песочницы, приводящий к удаленному выполнению кода RCE от имени root в стандартной Docker-среде. Поле| Значение ---|--- CVE| CVE-2026-40217 CVSS| 8.8 ВЫСОКИЙ —...

Aegis-releases

Aegis Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't. Two layers, both verified on real hardware. Kernel sandbox — the agent's own shell cannot reach a denied path: $ ! cat /.ssh/idrsa cat: /Users/you/.ssh/idrsa: Operation not permitted $ ! ca...

CVE-2026-106218

In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...

CVE-2026-20223

CVE-2026-20223 ⚠️ 보안 연구 및 법적 면책 고지 📌 이 저장소의 목적 이 저장소는 교육, 학술 및 공인된 사이버보안 연구 목적으로만 엄격히 제공됩니다. 다음에 대한 이해를 지원하기 위한 것입니다: 통제된 환경에서의 보안 취약점 및 익스플로잇 개념 샌드박스 격리 메커니즘 및 그 한계 안전한 소프트웨어 설계 및 방어적 보안 관행 🚫 승인된 사용만 허용 이 저장소는 명시적 권한이 부여된 환경에서만 사용해야 합니다. 예: 개인 또는 통제된 가상 머신 Docker 또는 격리된 실험실 환경 공인된 침투 테스트 계약 학술 또는...

CVE-2021-46361

CVE-2021-46361: Magnolia CMS의 FreeMarker 제한 우회 Magnolia CMS v6.2.11 및 이하 버전의 FreeMarker 필터에서 발견된 문제로, 공격자가 보안 제한을 우회하고 특수하게 조작된 FreeMarker 페이로드를 통해 임의 코드를 실행할 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 개념 증명: 자세한 내용과 공격 과정은 이 PDF에서 확인할 수 있습니다. 추가 자료: FreeMarker 샌드박스를 탈출하는 데 사용된...