ROOT-APP-NPM-CVE-2026-44007 CVE-2026-44007 in vm2 - Patched by Root

Root has patched CVE-2026-44007 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-V836-6XW4-9CX3 GHSA-v836-6xw4-9cx3 in vm2 - Patched by Root

Root has patched GHSA-v836-6xw4-9cx3 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24118 CVE-2026-24118 in vm2 - Patched by Root

Root has patched CVE-2026-24118 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root

Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47139 CVE-2026-47139 in vm2 - Patched by Root

Root has patched CVE-2026-47139 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root

Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47140 CVE-2026-47140 in vm2 - Patched by Root

Root has patched CVE-2026-47140 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24781 CVE-2026-24781 in vm2 - Patched by Root

Root has patched CVE-2026-24781 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26332 CVE-2026-26332 in vm2 - Patched by Root

Root has patched CVE-2026-26332 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44009 CVE-2026-44009 in vm2 - Patched by Root

Root has patched CVE-2026-44009 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-OS-ALPINE-315-CVE-2025-64720 CVE-2025-64720 in libpng - Patched by Root

Root has patched CVE-2025-64720 in the libpng package for Root:Alpine:3.15. Multiple fixed versions available...

Simulation_CVE-2024-46256

CVE-2024-46256 & CVE-2024-46257 – PoC 시뮬레이션 개요 이 저장소는 Nginx Proxy Manager에서 OS 명령 주입을 가능하게 하여 인증 후 원격 코드 실행RCE으로 이어지는 두 가지 취약점을 시뮬레이션하는 단계별 이미지 기반 개념 증명PoC 자료입니다. 영향받는 제품: Nginx Proxy Manager 영향받는 버전: v2.11.3 영향: 인증된 RCE PoC에서 루트 권한으로 확인됨 내용 POC.md: 페이로드 및 관찰 결과를 포함한 분석 및 악용 절차에 대한 상세 문서. static/...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2021-4034

학술 연구 과제 CVE-2021-4034 PwnKit 이 저장소에는 보안 취약점 CVE-2021-4034일명 PwnKit에 관한 선택 모듈 응용 IT 보안 학술 연구 과제의 자료, 코드 예제 및 문서가 포함되어 있습니다. 요약 본 학술 연구 과제는 선택 모듈 응용 IT 보안의 일환으로, 2022년 1월에 공개된 취약점 CVE‑2021‑4034를 다룹니다. 영향을 받는 것은 기본적으로 거의 모든 일반적인 Linux 배포판에 설치되어 있는 polkit 구성 요소의 SUID 루트 프로그램인 pkexec입니다. 이는 비권한 로컬 사용...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

EUVD-2026-89583

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity versions prior to 38.2 , as well as versions 39.0 , 39.1 , and 40.0 , are vulnerable to a privilege escalation flaw. The root cause is improper input validation within an internal Pexip Infinity service. An attacker with local access can escalate privileges to root , provided they ...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

Blue Angel Software Suite (5V Technologies) - OS Command Injection

Blue Angel 5V Technologies Blue Angel Software Suite through 20230920, as used in Analog Telephone Adapter ATA and Voice over IP VoIP devices, allows remote authenticated attackers to execute arbitrary OS commands as root via shell metacharacters in the pingaddr parameter to...