litebox

LiteBox Un sistema operativo librería enfocado en seguridad !NOTE Este proyecto se encuentra actualmente en evolución y mejora activa. Aunque estamos trabajando hacia un lanzamiento estable, algunas API e interfaces pueden cambiar a medida que el diseño continúa madurando. Eres bienvenido a...

NemoClaw

NVIDIA NemoClaw: Pila de Referencia para Agentes de IA en Entornos Aislados en OpenShell NVIDIA NemoClaw es una pila de referencia de código abierto para ejecutar agentes de IA siempre activos de manera más segura dentro de sandboxes de NVIDIA OpenShell. Proporciona una incorporación guiada, un...

mcpguard-dynamic

MCPGuard-Dynamic Kernel-level sandboxing for LLM agent tool calls made through the Model Context Protocol MCP. MCPGuard sits as a transparent proxy between an MCP client the agent / runner and an MCP server subprocess, applying three layered defenses to every tool invocation. The lowest layer is...

lfi

Aislamiento Ligero de Fallos LFI Bienvenido al repositorio de nivel superior del proyecto de Aislamiento Ligero de Fallos LFI. ¿Qué es LFI? LFI es un sistema para aislar sandboxing código nativo. Al igual que WebAssembly y Native Client, LFI aísla el código en proceso es decir, en el mismo espaci...

libloong

LoongArch64 sandboxing library libloong is a 64-bit high-performance LoongArch emulator library designed for embedding and high-frequency scripting. Built on the architecture of libriscv, it provides the fastest 64-bit interpreter performance available, maintaining a compact 18k LOC codebase with...

tenet

Tenet - A Trace Explorer for Reverse Engineers Overview Tenet is an IDA Pro plugin for exploring execution traces. The goal of this plugin is to provide more natural, human controls for navigating execution traces against a given binary. The basis of this work stems from the desire to research ne...

Cordon

Cordon ⚠️ PROYECTO DEPRECADO El desarrollo de este proyecto se ha detenido porque otra persona estaba trabajando en la misma idea y construyó una solución mejor. Recomendamos encarecidamente visitar:Fence by Use-Tusk. Nota: Este repositorio fue creado originalmente paraFOSS HACK 2026 , aunque...

Wubes

Wubes Architecture Prerequisites Usage Tricks Firefox sandbox References Wubes Wubes is like Qubes but for Windows. The idea is to leverage the Windows Sandbox technology to spawn applications in isolation. We currently support spawning a Windows Sandbox for the following applications: Firefox...

nexus-os

Nexus OS El Sistema Operativo de IA Agéntica Gobernado 66 Crates | 675 Comandos | 86 Páginas | 5,229 Pruebas | 10/10 OWASP | Cero Stubs Local-first. Aislable de red. Preparado para post-cuántico. Construido en Rust. Arquitectura | Inicio Rápido | Características | Estado de la Auditoría |...

CVE-2026-26720-Twenty-RCE

Twenty CRM - Authenticated Remote Code Execution RCE Overview Product: Twenty CRM Vulnerability: Remote Code Execution RCE via Serverless Workflow Functions Severity: Critical Affected Component: Workflow Automation Code - Serverless Function Tested Version: v1.15.0 This repository documents a...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC The vulnerability in Langflow 1.8.1 and earlier allows a remote, unauthenticated attacker to achieve arbitrary command execution on the host. Description The POST /api/v1/buildpublictmp/flowid/flow endpoint permits anyone to build public flows without authenticatio...

EUVD-2026-66223

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

CVE-2025-24893

XWiki CVE-2025-24893 Proof of Concept Authors : Net.Doge & Infinit3i This Python script exploits CVE-2025-24893 , a remote code execution RCE vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into...

CVE-2026-82278

BISHENG versions before 2.6.0 contain an authenticated remote code execution vulnerability in the POST /api/v1/workflow/run_once endpoint. Crafted Code node definitions submitted by authenticated users are executed via exec() without sandboxing , granting access to the filesystem, credentials, an...

CVE-2026-79150

A flaw was found in Google Chrome. This use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to significant security compromise...

CVE-2026-79241

Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79292

CVE-2026-79292 is an integer overflow in the Chromecast component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox , rated High severity by Chromium and 8.3...

Astra Linux – Vulnerability in Firefox

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – Vulnerability in Firefox

Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

SUSE CVE-2026-64728

A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy...