CVE-2026-2441

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 Hoch | Aktiv in freier Wildbahn ausgenutzt | Renderer-RCE Sandboxed Eine Use-After-Free-Sicherheitslücke in Google Chromes Blink-CSS-Engine, die es einem entfernten Angreifer ermöglicht, über eine präparierte HTML-Seite...

cve-2018-12386

استغلال RCE في صندوق حماية Firefox CVE-2918-12386 هذا استغلال بسيط للثغرة CVE-2018-12386 التي اكتشفها Niklas Baumstark وSamuel Groß وBruno Keith. هذا في الغالب إثبات مفهوم PoC قمت به للمتعة، ولا يوجد فيه تجاوز لصندوق الحماية، ولن يعمل إلا على إعداد Linux معيّن تكون فيه الإزاحات المستخدمة في...

CVE-2018-17463

CVE-2018-17463 Proof of Concept funzionante per l'exploit di CVE-2018-17463 che utilizza pagine RWX di WebAssembly per l'esecuzione di shellcode. CVE-2018-17463 è nata da un'annotazione errata degli effetti collaterali in V8 in Google Chrome precedente alla versione 70.0.3538.64, consentendo a un...

CVE-2013-2729

Adobe Reader BMP/RLE heap corruption - CVE-2013-2729 Adobe Reader X è un potente software sviluppato da Adobe Systems per visualizzare, creare, manipolare, stampare e gestire file in formato PDF Portable Document Format. Dalla versione 10 include la Modalità protetta, una tecnologia sandbox simil...

flatpak

Flatpak è un sistema per creare, distribuire ed eseguire applicazioni desktop in sandbox su Linux. Vedi https://flatpak.org/ per maggiori informazioni. Flatpak è disponibile nei repository dei pacchetti della maggior parte delle distribuzioni Linux e può essere installato da lì. Vedi...

see

Ambiente di Esecuzione in Sandbox :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Download: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

CVE-2026-57170

A flaw was found in compliance-trestle. The custom Jinja2 include tags, mdsectioninclude and mdcleaninclude, incorrectly re-parse the content of included Markdown files as Jinja2 template code in a non-sandboxed environment. This vulnerability, known as Server-Side Template Injection SSTI, allows...

agentbox

🛡️ AgentBox Die Open-Source-Sandbox-Laufzeitumgebung für KI-Agenten Führen Sie KI-Agenten mit Zuversicht aus. Jeder Agent erhält seinen eigenen Berechtigungsumfang, einen Anmeldedaten-Tresor, ein Prüfprotokoll und einen Notausschalter. Warum AgentBox existiert Am 27. Januar 2026 wurde...

AppEnumFix

Jailbreak-Tweak zum Patchen von CVE-2025-31207, einem Fehler, der Sandbox-Anwendungen erlaubt, die installierten Apps eines Benutzers aufzulisten. Von Apple in iOS 18.5 behoben 22F5053j / iOS 18.5 Beta 3 diff...

Aura-State

Aura-State Un framework Python per costruire workflow LLM come macchine a stati, con verifica formale integrata. root@kitploit: pip install git+https://github.com/munshi007/Aura-State.git Che cos'è La maggior parte dei framework LLM ti permettono di concatenare chiamate API e sperare per il megli...

reposherlock

RepoSherlock Englisch | Türkçe Gib eine GitHub-Repository-URL oder einen lokalen Pfad ein und erhalte Architektur, Ausführungshinweise, Risiken und umsetzbare Probleme. Live-CLI-Vorschau Warum RepoSherlock Bevor du ausführst: Verstehe die Architektur. Bevor du vertraust: Sieh dir Sicherheits- und...

rustnet

RustNet Monitoramento de rede por processo para o seu terminal: conexões TCP, UDP e QUIC ao vivo com inspeção profunda de pacotes, com sandbox por padrão. Português | |...

iron-proxy

iron-proxy Das Problem CI-Jobs, KI-Codierungsagenten und sandboxed Container können beliebige ausgehende Anfragen stellen. Eine kompromittierte Abhängigkeit, eine Prompt-Injection oder ein bösartiger Build- Schritt kann Geheimnisse exfiltrieren, sich nach Hause telefonieren oder eine Reverse Shel...

cve-2018-12386

Exploit RCE in Sandbox di Firefox CVE-2018-12386 Ecco un semplice exploit per la vulnerabilità CVE-2018-12386 scoperta da Niklas Baumstark, Samuel Groß e Bruno Keith. Questo è principalmente un PoC che ho realizzato per divertimento, non c'è alcun bypass della sandbox e funzionerà solo su una...

webvm

WebVM Este repositório hospeda o código-fonte para https://webvm.io, uma máquina virtual Linux que roda no seu navegador. Experimente o novo ambiente gráfico Alpine / Xorg / i3: https://webvm.io/alpine.html WebVM é um ambiente virtual sem servidor que roda completamente no lado do cliente em...

CVE-2026-80198 Kimai before 2.56.0 Information Disclosure via config() Twig Function

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-80198

Kimai versions before 2.56.0 fail to properly restrict the config() Twig function within sandboxed invoice and export templates. This allows users with admin privileges to upload malicious templates that read arbitrary configuration keys, potentially exfiltrating sensitive server-wide secrets suc...

CVE-2026-57170

compliance-trestle (Trestle), a Python SDK for managing OSCAL compliance documents, is vulnerable to server-side template injection in versions prior to 3.12.4 and 4.0.0 through 4.0.3. The custom Jinja2 include tags (mdsection_include and md_clean_include) re-parse included Markdown file content ...

CVE-2026-57170 Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsectioninclude and mdcleaninclude re-parse the content of an included Markdown file as Jinja2 template co...

CVE-2026-54757

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...