sandbox-attacksurface-analysis-tools

sandbox-attacksurface-analysis-tools versione 2. c Google LLC. 2015 - 2024 Sviluppato da James Forshaw Questa è una piccola suite di strumenti PowerShell per testare varie proprietà dei sandbox su Windows. Molti strumenti accettano un flag -ProcessId che viene usato per specificare il PID di un...

Wubes

Wubes Architektur Voraussetzungen Verwendung Tricks Firefox-Sandbox Referenzen Wubes Wubes ist wie Qubes, aber für Windows. Die Idee ist, die Windows Sandbox-Technologie zu nutzen, um Anwendungen isoliert auszuführen. Wir unterstützen derzeit das Starten einer Windows-Sandbox für die folgenden...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged-Pool-Heapüberlauf → lokale Rechteausweitung LPE. Dieses Verzeichnis enthält den PoC-Quellcode für das Labor basiert auf MrAle98/CVE-2025-21333-POC, inklusive lokalem Patch. 1. Schwachstellenübersicht Eigenschaft| Inhalt ---|--...

wsb-detect

⏳ wsb-detect wsb-detect ti permette di rilevare se sei in esecuzione in Windows Sandbox "WSB". La sandbox viene utilizzata da Windows Defender per l'analisi dinamica, e comunemente manualmente dagli analisti di sicurezza e simili. Alla fine del 2019, Microsoft ha introdotto una nuova funzionalità...

CVE-2023-36723

CVE-2023-36723 Questo è un PoC per il bug di creazione arbitraria di directory nel servizio Container Manager. Questo PoC non è stato testato a fondo, quindi potrebbe non funzionare nemmeno nella maggior parte dei casi è bastato per far confermare la vulnerabilità da MSRC. Per sfruttare questa...

cuckoo3

Cuckoo3 - Strumento di analisi malware Informazioni Cuckoo3 è uno strumento open-source per testare file sospetti o link in un ambiente controllato. Li testerà in uno o più emulatori di piattaforma in sandbox e genererà un report che mostrerà cosa hanno fatto i file o i siti web durante il test. ...

CVE-2025-21333

CVE-2025-21333 você pode encontrar a primeira versão do exploit para esta CVE em https://github.com/MrAle98/CVE-2025-21333-POC/tree/master . Eu fiz este novo exploit inspirado no feito pelo MrAle98. Ele é mais estável e um pouco menos arriscado, pois não abre o processo de sandbox do Windows para...

SUSE CVE-2026-19171

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-15122

Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-13869

Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

PT-2026-48777

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.115 Description An inappropriate implementation in Views allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. A sandb...

CVE-2026-11634

CVE-2026-11634 describes a use-after-free in Chrome’s Gamepad handling on Windows, exploitable via a crafted HTML page to potentially escape the Chromium sandbox. Affected: Google Chrome on Windows, prior to version 149.0.7827.103. Impact: remote attacker could achieve sandbox escape with a high ...

CVE-2026-10971

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10940

Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10913

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9890

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-9937

Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-27464

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMEDPIPEOPENREQ into a fixed WCHAR pipename160 stack buffer using wcscat without verifying null termination. The handler only...

CVE-2026-32603

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the...

Sandboxie Plus code issue and vulnerabilities

Sandboxie Plus is an open-source Windows sandboxing tool developed by Sandboxie Plus. Version 0.7.2 of Sandboxie Plus has a code vulnerability; this vulnerability stems from a service path in the SbieSvc service that lacks quotation marks, which may allow local attackers to execute code with...