31620 matches found
AZL-100908 CVE-2026-87766 affecting package bubblewrap 0.8.0-1
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
CVE-2026-87766
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google on Tuesday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 CVSS score: N/A, has been described as an out-of-bounds bug in V8, Chrome's...
CVE-2026-87766 Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
CVE-2026-87766
CVE-2026-87766 is a symlink traversal vulnerability in bubblewrap , a sandboxing tool used by the containers project. During sandbox setup, creating files or directories under the new root can follow a parent symlink via /oldroot onto the host, allowing an attacker to write files at arbitrary pat...
EUVD-2026-74778
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
CVE-2026-87766
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
CVE-2026-87766 Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
CVE-2026-87766
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...
CVE-2026-4447
CVE-2026-4447 - V8 in Google Chrome prior to Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-03-20 Technical...
CVE-2026-22686
Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...
jsPDF-Object-Injection
CVE-2026-25755 Sandbox Bypassed jsPDF Flaw to Object Injection Overview A critical PDF Object Injection vulnerability CVE-2026-25755 was discovered in jsPDF, a widely-used JavaScript library for generating PDF documents in client-side applications. The vulnerability exists in the addJS function,...
ROOT-APP-NPM-GHSA-M5W8-4GQ2-6F8X GHSA-m5w8-4gq2-6f8x in vm2 - Patched by Root
Root has patched GHSA-m5w8-4gq2-6f8x in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root
Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...
CVE-2026-33229
CVE-2026-33229 โ XWiki RCE via Apache Velocity Sandbox Bypass A Remote Code Execution vulnerability in XWiki Platform that allows an authenticated user with scripting permissions to bypass the Apache Velocity sandbox entirely โ no Java Reflection required โ by traversing pre-instantiated objects...
CVE-2026-57825
A flaw was found in the opam package manager for OCaml. This vulnerability allows a malicious package to bypass the sandbox protection mechanism. By mishandling symlinks during the processing of .install files, an attacker can write arbitrary files to unintended locations on the system, potential...
cve-2025-49131-poc
CVE-2025-49131 - FastGPT Sandbox Escape POC root@kitploit: โโโโโโโโ โโโโโโ โโโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโ โโโโโโ โโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโโ โโโ โโโโโโ โโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโ โโโ โโโ โโโ โโโโโโโโโโโ โโ...
CVE-2026-21636
CVE-2026-21636 - Node.js ๆ้ๆจกๅ UDS/็ฝ็ป็ป่ฟ ๆผๆดๆ่ฆ Node.js ๆ้ๆจกๅ ๏ผ--permission๏ผๆจๅจ้่ฟ้ๅถๅฏนๆไปถ็ณป็ปใๅญ่ฟ็จใๅทฅไฝ็บฟ็จๅ็ฝ็ป็่ฎฟ้ฎๆฅๅฏน่ฟ็จ่ฟ่กๆฒ็ฎฑๅใCVE-2026-21636 ๆญ็คบไบ้่ฟ undici/fetch๏ผไปฅๅ net/tls๏ผๅฐ Unix ๅๅฅๆฅๅญ ๅๆฌๅฐ TCP ๅฐๅ็่ฟๆฅๅฎๅ จ็ป่ฟไบ็ฝ็ป้ฒๆค๏ผๅณไฝฟๆช่ฎพ็ฝฎ --allow-net ไนๆฏๅฆๆญคใ ๅๅฝฑๅ๏ผNode.js v25๏ผ็ฝ็ปๆ้ๅจๆซ้ฒๆถไปๅคไบๅฎ้ช้ถๆฎต๏ผใ ๆญค PoC ๅจ v22 ไธๅค็ฐไบ่ฏฅๆฆๅฟต๏ผๅ ถไธญๅฏไปฅ่งๅฏๅฐ็ธๅ็็ป่ฟ่กไธบใ ่ฝๅคๅๅจ...
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization
Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...