Scalefusion MDM Agent Access Control

The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain access to the isolated software environment...

ROS-20231114-01

A vulnerability in the Blink Media component of the Google Chrome browser is related to memory usage after it has been after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the Blink Frames component of Goog...

vm2 handleException() Code Execution

The vulnerability of the handleException function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. Exploiting this vulnerability can allow a remote attacker to exit from a isolated programming environment and execute arbitrary code...

Google Chrome Skia Code Execution

The vulnerability of Google Chrome’s Skia library is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to escape from a isolated software environment and execute arbitrary code...

vm2 Package Manager Code Execution

The vulnerability of the source code transformer in the vm2 package manager NPM is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a malicious actor to exit from a isolated software environment and execute arbitrary code...

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

The maintainers of the vm2 JavaScript sandbox module have shipped a patch to address a critical flaw that could be abused to break out of security boundaries and execute arbitrary shellcode. The flaw, which affects all versions, including and prior to 3.9.14, was reported by researchers from Sout...

4 Steps to Creating a Powerful Research Lab for Reverse Engineering

However, manual lab setup and configuration can prove to be a laborious and time-consuming process. In this article, we'll look at 4 ways to create a reverse engineering lab, discuss how to save time, and, potentially, improve the detection rate using a sandbox-as-a-service, and a recommended lis...

Delay with enumerating resources after logging in to Citrix Workspace App during first login

In an isolated environment where there is no access to external sites ,there is delay when adding account/store in Workspace App...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

cve-2022-44268-detector - detect malicious PNGs cve-2022-4426...

Google Chrome Graphics Processor Escape

The vulnerability of the Google Chrome browser’s graphics processor is related to buffer overflow in the heap. Exploiting this vulnerability can allow a remote attacker to escape from the isolated software environment...

Default configuration

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

Isolated environment Disclosure Protected Information

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

DevTools Set XSS

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to escape from an isolated programming environment using a speciall...

CVE-2021-20791

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors...

Improper access control

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors...

CVE-2021-20791: Undefined Security Weakness

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors...

Multiple vulnerabilities in RevoWorks Browser

Overview RevoWorks Browser provided by J's Communication Co., Ltd. is a virtual browser which enables internet isolation. It provides the function that enables access to drives, folders, files, and registries under the isolated environment from the local environment when running the web browser...

Trusted Firmware M 安全漏洞

ARM Trusted Firmware M TFM is an open source software from ARM UK. It provides a set of highly configurable software components to create a trusted execution environment. A security vulnerability exists in Trusted Firmware Mbed TLS that stems from a side-channel vulnerability in base64 PEM file...

Avora Center omp-appmanager Module Access Control

The vulnerability of the omp-appmanager module for mobile applications, which is part of the “Avora Center” application software, relates to the provision of unprivileged accounts for the privileged API used for installing and removing applications. Exploiting this vulnerability could allow a...

DevTools Google Chrome Escape

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to exit from a isolated software environment...