CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC con Docker Configuración Para personalizar el archivo httpd.conf, cambie la línea 251 en la sección de Require all denied a Require all granted. root@kitploit: AllowOverride none Require all granted Crear un Dockerfile en tu proyecto root@kitploit: FROM...

php_filter_chain_generator

Generador de cadenas de filtros PHP Una CLI para generar cadenas de filtros PHP, consigue tu RCE sin subir un archivo si controlas por completo el parámetro pasado a un require o a un include en PHP. Uso Ayuda root@kitploit: $ python3 phpfilterchaingenerator.py --help usage:...

CVE-2018-17246

CVE-2018-17246 - Kibana LFI No hay validación de entrada, por lo que podemos cambiar el nombre del archivo JavaScript a lo que queramos. En este caso, con la técnica de path traversal, podemos elegir cualquier archivo en el servidor Kibana. Sin embargo, una cosa a tener en cuenta es la...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

RCE in ESM Environments — The require Problem When achieving sandbox escape via CVE-2026-22686, executing OS commands in an ESM project "type": "module" requires bypassing Node.js module loading restrictions. Standard approaches fail for the following reasons:...

CVE-2026-85057

The ZITADEL identity management platform (versions 3.0.0 up to 3.4.13 and 4.16.1) contains a sandbox escape vulnerability in Actions V1 . The goja Node-compatible require() registry lacks restrictions on its filesystem source loader, allowing an organization Action author with specific permission...

EUVD-2026-86322

ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require registry without restricting its filesystem source loader. An organization Action author with ORGOWNER, org.action.write, and org.flow.write...

EUVD-2026-44812

9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade...

CVE-2021-41773-i-

CVE-2021-41773 CVE-2021-41773 POC con Docker Configuración Para personalizar el archivo httpd.conf, cambie la línea 251 en la sección de Require all denied a Require all granted. root@kitploit: AllowOverride none Require all granted Crear un Dockerfile en tu proyecto root@kitploit: FROM...

CVE-2026-92950

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses requirefilename to re-execute itself in the host realm, bypassing sandbox...

CVE-2026-92935

vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor computes hasRealRequireConfig with typeof requireOpts === 'object' && requireOpts !== null, so an array-shaped require value for example require: satisfies the guard that is meant to...

CVE-2026-92950 vm2 before 3.11.7 Sandbox Escape via CLI require

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses requirefilename to re-execute itself in the host realm, bypassing sandbox...

CVE-2026-92950 vm2 before 3.11.7 Sandbox Escape via CLI require

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses requirefilename to re-execute itself in the host realm, bypassing sandbox...

CVE-2026-92950 vm2 before 3.11.7 Sandbox Escape via CLI require

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses requirefilename to re-execute itself in the host realm, bypassing sandbox...

CVE-2026-92950

vm2 before 3.11.7 contains a sandbox escape in its CLI tool . By supplying a malicious script file that calls require(__filename), an attacker re-executes the script in the host Node.js realm , breaking sandbox isolation and gaining access to host modules such as fs and child_process . This yield...

EUVD-2026-81599

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses requirefilename to re-execute itself in the host realm, bypassing sandbox...

CVE-2026-92935 vm2 NodeVM Remote Code Execution via Array-Shaped Require

vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor computes hasRealRequireConfig with typeof requireOpts === 'object' && requireOpts !== null, so an array-shaped require value for example require: satisfies the guard that is meant to...

CVE-2026-92935 vm2 NodeVM Remote Code Execution via Array-Shaped Require

vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor computes hasRealRequireConfig with typeof requireOpts === 'object' && requireOpts !== null, so an array-shaped require value for example require: satisfies the guard that is meant to...

EUVD-2026-81585

vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor computes hasRealRequireConfig with typeof requireOpts === 'object' && requireOpts !== null, so an array-shaped require value for example require: satisfies the guard that is meant to...

CVE-2026-92935 vm2 NodeVM Remote Code Execution via Array-Shaped Require

vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor computes hasRealRequireConfig with typeof requireOpts === 'object' && requireOpts !== null, so an array-shaped require value for example require: satisfies the guard that is meant to...

CVE-2026-92935

vm2 is a sandbox for running untrusted Node.js code. In versions 3.11.4 through 3.11.6 , a flaw in the NodeVM constructor's guard (typeof requireOpts === 'object' && requireOpts !== null) allows an array-shaped require value (e.g., require: []) to pass, producing a resolver with only NESTING_OVER...