Exploit for Injection in Vm2_Project Vm2

🗓️ 14 Feb 2024 13:05:57Reported by Cur1iosityType

Exploit for Vm2 Project Vm2 vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to escape the sandbox and run arbitrary code in host context. Tool for exploring CVE-2023-30547 with 4 modes

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands is vulnerable to arbitrary code execution due to [CVE-2023-30547]	25 May 202313:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to multiple vulnerabilities	28 Jul 202301:39	–	ibm
GithubExploit	Exploit for Injection in Vm2_Project Vm2	4 Jun 202410:01	–	githubexploit
GithubExploit	Exploit for Injection in Vm2_Project Vm2	10 Dec 202308:32	–	githubexploit
GithubExploit	Exploit for Injection in Vm2_Project Vm2	8 Feb 202407:03	–	githubexploit
BDU FSTEC	The vulnerability of the handleException() function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. This allows a malicious user to exit from a isolated programming environment and execute arbitrary code.	24 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-30547	18 Apr 202318:14	–	circl
CNNVD	vm2 注入漏洞	17 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30547	17 Apr 202321:42	–	cve
Cvelist	CVE-2023-30547 Sandbox Escape in vm2	17 Apr 202321:42	–	cvelist