正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)

metnew

3,672 subscribers

96,051 次观看 • 4 天前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Want to run Claude Code in yolo mode but don't want it to potentially cripple your system? Easy 🔥 Install Docker to run it in a sandbox w/ this script: curl -sSL | bash Script below:

Want to run Claude Code in yolo mode but don't want it to potentially cripple your system? Easy 🔥 Install Docker to run it in a sandbox w/ this script: curl -sSL | bash Script below:

Ian Nuttall

47,948 次观看 • 1 年前

Oh my god... Claude Code is insane I created "Particle Playground" with Claude Code on the using Mediapipe Full Prompt below 👇

Oh my god... Claude Code is insane I created "Particle Playground" with Claude Code on the using Mediapipe Full Prompt below 👇

Emily Lambert

267,426 次观看 • 5 个月前

Claude code + Skills >>>> Claude code We created a skill that, - Makes Claude Code read your past conversations - Understands what code issues you struggled at - Generates a detailed report on Slack Works with Rube Here's the link to the Skill:

Claude code + Skills >>>> Claude code We created a skill that, - Makes Claude Code read your past conversations - Understands what code issues you struggled at - Generates a detailed report on Slack Works with Rube Here's the link to the Skill:

Karan Vaidya

39,199 次观看 • 7 个月前

ohhh my... Claude Code for Video Animations is insane. In 1 prompt you can create animated videos with Claude Code... w/ the new Remotion skill. And you can do this in the browser because vibecode.dev uses Claude Code as the default agent. (Full prompt below 👇)

ohhh my... Claude Code for Video Animations is insane. In 1 prompt you can create animated videos with Claude Code... w/ the new Remotion skill. And you can do this in the browser because vibecode.dev uses Claude Code as the default agent. (Full prompt below 👇)

Vibecoding Explained

40,260 次观看 • 5 个月前

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

TrendAI Zero Day Initiative

32,720 次观看 • 21 天前

iOS 18.3 arm64e sandbox escape , Rewrote sandbox extension class from " → " with "/" in kernel memory = Full filesystem R+W ^ the offsets are hardcoded ..

iOS 18.3 arm64e sandbox escape , Rewrote sandbox extension class from " → " with "/" in kernel memory = Full filesystem R+W ^ the offsets are hardcoded ..

 CrazyMind

102,483 次观看 • 2 个月前

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 次观看 • 10 个月前

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,524 次观看 • 10 个月前

Excited to launch happycapy, an agent-native computer on your browser. Claude Code → Clawdbot → Happycapy > Private sandbox for everyone to run Claude Code anytime anywhere - no Mac Mini needed > GUI built for everyday user, visualizing skills and its output

Excited to launch happycapy, an agent-native computer on your browser. Claude Code → Clawdbot → Happycapy > Private sandbox for everyone to run Claude Code anytime anywhere - no Mac Mini needed > GUI built for everyday user, visualizing skills and its output

Jarod Xu

772,860 次观看 • 5 个月前

Introducing Plan Mode. Because a prompt without a plan is just a wish. In plan mode, your agent shows its work in a read-only sandbox before touching anything. Just plan → approve → execute.

Introducing Plan Mode. Because a prompt without a plan is just a wish. In plan mode, your agent shows its work in a read-only sandbox before touching anything. Just plan → approve → execute.

Notion

69,745 次观看 • 2 个月前

Anthropic just dropped Dispatch in Claude Cowork. Message Claude from your phone. It runs persistent tasks on your desktop (files, code, browser). Come back to finished work. Local sandbox, you approve everything.

Anthropic just dropped Dispatch in Claude Cowork. Message Claude from your phone. It runs persistent tasks on your desktop (files, code, browser). Come back to finished work. Local sandbox, you approve everything.

TFTC

14,608 次观看 • 3 个月前

$Running Claude Code Agents in Docker and it's working great 👏 Just executed this and watched Claude build a complete Express REST API inside an isolated container: npx claude-code-templates@latest --sandbox docker \ --agent development-team/backend-architect \ --prompt "Create a REST API with Express with validation and error handling" - Container spins up - installs Claude Agent SDK - downloads the agent - Claude starts coding Everything visible in Docker logs. Output: Full Express project with routes, validation, error handling. All files extracted to local after execution. Next tutorials: Adding Telemetry and Hooks to monitor what Claude does inside the container. Running these agents on ECS or Kubernetes would be interesting 🤔$

Running Claude Code Agents in Docker and it's working great 👏 Just executed this and watched Claude build a complete Express REST API inside an isolated container: npx claude-code-templates@latest --sandbox docker \ --agent development-team/backend-architect \ --prompt "Create a REST API with Express with validation and error handling" - Container spins up - installs Claude Agent SDK - downloads the agent - Claude starts coding Everything visible in Docker logs. Output: Full Express project with routes, validation, error handling. All files extracted to local after execution. Next tutorials: Adding Telemetry and Hooks to monitor what Claude does inside the container. Running these agents on ECS or Kubernetes would be interesting 🤔

Daniel San

99,965 次观看 • 7 个月前

Claude Code creator, Boris Cherny: "Going from agents to loops is as big a jump as going from code to agents." 40 minutes of the head of Claude Code showing exactly how he works now. Loops running his code reviews, his maintenance, his fixes, on their own. Watch it, then read the full breakdown of loops below.

Claude Code creator, Boris Cherny: "Going from agents to loops is as big a jump as going from code to agents." 40 minutes of the head of Claude Code showing exactly how he works now. Loops running his code reviews, his maintenance, his fixes, on their own. Watch it, then read the full breakdown of loops below.

Anatoli Kopadze

371,780 次观看 • 9 天前

Stop paying for Claude Code! Use it for FREE with ollama I just set up Claude Code running locally on my computer. Zero API costs, complete privacy, and it actually works for real coding tasks. Full step-by-step guide in my latest video:

Stop paying for Claude Code! Use it for FREE with ollama I just set up Claude Code running locally on my computer. Zero API costs, complete privacy, and it actually works for real coding tasks. Full step-by-step guide in my latest video:

Mervin Praison

57,732 次观看 • 4 个月前

Meet our unified development platform with elevated Sandboxes and Devboxes 🔥 Level up a Sandbox to a Devbox and get: 🤖 Built-in AI 🆚 VS Code support Read the full blog post 👇

Meet our unified development platform with elevated Sandboxes and Devboxes 🔥 Level up a Sandbox to a Devbox and get: 🤖 Built-in AI 🆚 VS Code support Read the full blog post 👇

CodeSandbox

13,229 次观看 • 2 年前

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,539 次观看 • 2 年前

Claude Code in a sandbox from scratch to auth'd and ready in 15s: One of many things you can do with these. Stay tuned!

Claude Code in a sandbox from scratch to auth'd and ready in 15s: One of many things you can do with these. Stay tuned!

Chris McCord

12,961 次观看 • 8 个月前

CVE-2024-29269: Remote Code Execution PoC Credit:

CVE-2024-29269: Remote Code Execution PoC Credit:

Dark Web Informer

69,755 次观看 • 1 年前

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

44,970 次观看 • 2 天前

CVE-2026-20841-POC REMOTE CODE EXECUTION VULNERABILITY IN NOTEPAD VERSION 11 Mr Phil Ghana 🇬🇭 Nana Sei Anyemedu

CVE-2026-20841-POC REMOTE CODE EXECUTION VULNERABILITY IN NOTEPAD VERSION 11 Mr Phil Ghana 🇬🇭 Nana Sei Anyemedu

H4RUK7 KIRA 🇯🇵🇨🇵

20,829 次观看 • 4 个月前