CAPEsolo

Python GUI to run capemon in standalone VM. Provides a subset of CAPE Configuration And Payload Extraction processing and results. The Interface Tabs across the top: Start, then one per result view Info, Behavior, Signatures, Payloads, Yara, Configs, Strings, Debugger, JS Log, Network. The Start...

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase 치명적 샌드박스 탈출 NocoBase에서 인증되지 않은 사용자 / 낮은 권한 → 루트 원격 코드 실행 📌 개요 CVE-2026-34156 은 NocoBase오픈소스 노코드/로우코드 플랫폼의 치명적인 샌드박스 탈출 취약점입니다. 워크플로 스크립트 노드Workflow Script Node 를 생성하거나 실행할 수 있는 공격자는 낮은 권한만으로도 Node.js vm 샌드박스를 탈출하여 컨테이너 내부에서 루트 권한으로 완전한 원격 코드 실행 을 달성할 수 있습니다. 영향을 받는 버전...

CVE-2025-55182-TOOLS

CVE-2025-55182 익스플로잇 도구 CVE-2025-55182 종합 익스플로잇/탐지 도구 개발:MingYi Security Lab 기능 취약점 탐지 : 여러 대상에 대해 취약점을 배치 스캔합니다. 경로 스캔 : 일반적인 Server Action 엔드포인트를 스캔하여 취약한 경로를 발견합니다. 원격 코드 실행 : 취약한 대상에서 시스템 명령을 실행합니다. 다중 익스플로잇 방식 : V1: vmrunInThisContext - 고전적인 RCE 방식 V2: $@ Chunk.prototype.then - Next.js...

CVE-2026-75538

A flaw was found in Erlang/OTP. A remote, unauthenticated attacker can exploit a signed length overflow vulnerability in the inet TCP driver when operating in packet,4 mode. By sending a specially crafted packet, the attacker can cause an incorrect packet length calculation, leading to a buffer...

cve-2026-0300-audit

CVE-2026-0300 監査ツール CVE-2026-0300 用の読み取り専用監査ツール — PAシリーズおよびVMシリーズファイアウォールのPAN-OS User-ID認証ポータル（旧称「キャプティブポータル」）における未認証バッファオーバーフローに関するものです。 このリポジトリは、Tailwind Resource Group セキュリティアドバイザリ TRG-SA-2026-003 に付随するもので、以下を提供します: auditportal.py — ティア1: 単一ファイアウォールの監査 auditfleet.py — ティア2:...

Sauercloude

Sauercloude 用于 RealWorld CTF 2020/2021 CVE-2021-2119 的 VirtualBox 6.1.2 0day 逃逸漏洞...

CVE-2026-22686

Enclave VM サンドボックス脱出 CTF チャレンジ チャレンジ: 「壁を打ち破れ」 難易度: ハード カテゴリ: ソースコードレビュー / サンドボックス脱出 ポイント: 500 シナリオ あなたは、謎めいたサンドボックス化された JavaScript 実行環境を発見しました...

CVE-2026-27597

CVE-2026-27597 - バージョン リモートコード実行 クイック使用方法 python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 悪用に関する注意事項 深刻度: CRITICAL CVSS: 10.0 影響: 機密性、完全性、可用性 公開日: 2026-02-25 技術概要 Enclave は、安全な AI エージェントコード実行のために設計されたセキュアな JavaScript サンドボックスです。バージョン 2.11.1 より前では、@enclave-vm/core...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE 通过 Jolokia API 描述 CVE-2026-34197 是 Apache ActiveMQ Classic 中的一个远程代码执行（RCE）漏洞，允许攻击者通过 Web 控制台中暴露的 Jolokia API 在服务器操作系统上执行任意命令。 该漏洞已存在超过 13 年，源于多个组件之间的交互：Jolokia（HTTP-JMX 桥接）、ActiveMQ 的 MBeans、网络连接器和 VM 传输。 漏洞信息 字段| 详情 ---|--- CVE ID| CVE-2026-34197 类型|...

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 KVM 内核热补丁 English | 简体中文 给 CentOS Stream 8 / RHEL 8 （4.18.0 全系列内核）的 KVM 宿主机修复 CVE-2026-64561（Zapscape） 漏洞的内核热补丁 ： 不打补丁的风险 ：租户虚拟机（guest）可以仅凭自身操作逃逸到宿主机，以宿主 内核 root 权限执行代码——击穿整台物理机及其上所有虚拟机。 本项目的补丁 ：基于 Linux 上游官方修复（2abd5287f083）backport 而来， 通过内核 livepatch 机制在线生效 ： ✅ 不重启宿...

CVE-2023-22098

CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 탈출 안녕하세요, VM 마법사 여러분, 2023년, 뛰어난 보안 연구원 Andy Nguyen@TheFlow0이 VirtualBox용 Virtio-net에서 여러 취약점을 발견했습니다. 그의 놀라운 작업에 모든 찬사를 보냅니다. 이 저장소에는 CVE-2023-22098에 대한 익스플로잇 이 포함되어 있습니다. 취약점에 대한 심층 분석, Virtio-net 내부 구조 살펴보기, 디버깅 설정, 그리고 이 익스플로잇 개발 가이드를 원하신다면...

BIT-RABBITMQ-2026-67238 RabbitMQ: Atom-table exhaustion via reply-to queue name decoding

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...

CVE-2024-33352

CVEID : CVE-2024-33352 Bluestacks Advisory ID : 대기 중 영향을 받는 제품 및 버전의 이름 : BlueStacks for Windows 10.40.1000.502 이전 버전 취약점 유형 : CWE-552: 외부 당사자가 접근할 수 있는 파일 또는 디렉터리 요약 BlueStacks는 가상 머신 내에서 게스트 Android 시스템을 실행하는 Android 에뮬레이터입니다. BlueStacks는 가상 머신 구성 파일을 모든 사용자가 쓰기 가능한 디렉터리에 저장하고 이를 서로 다른 OS 사용자 간...

EUVD-2025-209815

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

Rocky Linux 8 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2022_6357)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226357 advisory. open-vm-tools: local root privilege escalation in the virtual machine CVE-2022-31676 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2023_3949)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233949 advisory. open-vm-tools: authentication bypass vulnerability in the vgauth module CVE-2023-20867 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9.2 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0981)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260981 advisory. This advisory aggregates security fixes for the open-vm-tools SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-34058, CVE-2023-34059. Tenable has...

Rocky Linux 9 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2023_3948)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233948 advisory. open-vm-tools: authentication bypass vulnerability in the vgauth module CVE-2023-20867 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2023_5313)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235313 advisory. open-vm-tools: SAML token signature bypass CVE-2023-20900 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2025_17428)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517428 advisory. open-vm-tools: Local privilege escalation in open-vm-tools CVE-2025-41244 Tenable has extracted the preceding description block directly from the CIQ security...