bug-bounty529
xss292
rce171
google143
account-takeover120
bragging-post118
exploit118
facebook117
privilege-escalation107
malware103
microsoft99
open-source94
authentication-bypass90
csrf89
cve82
access-control76
stored-xss75
ai-agents65
web-security64
phishing63
reflected-xss63
writeup56
input-validation52
reverse-engineering51
ssrf51
sql-injection50
cross-site-scripting50
information-disclosure49
smart-contract49
defi48
tool48
api-security46
apple45
ethereum45
privacy45
vulnerability-disclosure44
opinion39
browser39
web-application38
ai-security38
llm38
web337
burp-suite37
remote-code-execution36
automation36
race-condition36
responsible-disclosure35
supply-chain35
dos34
oauth34
0
5/10
Execwall is a Rust-based execution firewall for AI agents that mitigates prompt injection attacks via seccomp-BPF filtering, command allowlisting, and namespace isolation, demonstrated against CVE-2026-2256 in ModelScope's agent framework.
prompt-injection
command-injection
ai-security
llm-agent
sandbox
seccomp
execution-filtering
modelscope
mitigation
CVE-2026-2256
ModelScope
ms-agent
Execwall
sundarsub
0
7/10
Comprehensive technical comparison of FreeBSD's Capsicum and Linux's seccomp-bpf sandboxing models, analyzing their opposite architectural philosophies (capability subtraction vs. syscall filtration) and demonstrating why Capsicum's structural approach is immune to bypass vulnerabilities like CVE-2022-30594 that affect filter-based systems.
sandboxing
capsicum
seccomp
freebsd
linux
process-isolation
capability-based-security
syscall-filtering
privilege-restriction
ambient-authority
tcpdump
architectural-comparison
cve-2022-30594
FreeBSD
Linux
Capsicum
seccomp
seccomp-bpf
Robert Watson
Jonathan Anderson
Andrea Arcangeli
Will Drewry
CVE-2022-30594
USENIX Security
tcpdump
BPF
PTRACE_SEIZE