1781 matches found
Codify-TJNULL-OSCP-
Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...
vm2
vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation npm install vm2 Quick Examples import VM from...
CVE-2022-36067-vm2-POC-webapp
CVE-2022-36067-vm2-POC-webapp Steps to reproduce 1. maybe install vm2 globally first npm -install [email protected] -g 2. run: node index.js 3. visit http://localhost:5000/poc 4. Upload poc file such as poc2.js or code and observe RCE...
Node_CVE-2023-29017
CVE-2023-29017 | Remote Code Execution via vm2 Sandbox Escape WHS 4th Generation, Class 31 - Kim Geon-woo @gunwoo105 Vulnerability Summary vm2 is a Node.js sandbox library for executing untrusted JavaScript in a restricted environment. Under normal circumstances, code inside the sandbox should no...
n8n-function-vm2
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · n8n-function-vm2 n8n-function-vm2 n8n 2.42.0 - n8n GmbH GHSA-j4p8-h8mh-rh8q moved n8n-nodes-base.code onto the JS task-runner child. Production spawn adds --disallow-code-generation-from-strings and...
CVE-2023-30547
CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...
CVE-2023-30547
CVE-2023-30547 Vulnerability description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException...
CVE-2023-30547
CVE-2023-30547 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to esca...
CVE-2023-30547
CVE-2023-30547 This is a Proof-of-Concept to CVE-2023-30547 https://nvd.nist.gov/vuln/detail/CVE-2023-30547. I created this PoC during a CTF. Usage CVE-2023-30547 PoC -h --url URL --lhost LHOST --lport LPORT PoC for the vm2 vulnerability CVE-2023-30547 options: -h, --help show this help message a...
vm2 CVE-2023-30547 sandbox escape RCE
CVE-2023-30547 vm2 = 3.9.19: Proxy/getPrototypeOf recursion escapes the sandbox when a web app evaluates user code with vm2. !/usr/bin/env python3 -- coding: utf-8 -- """vm2 CVE-2023-30547 sandbox escape via HTTP code runner.""" from future import annotations import base64 import json import re...
vm2 CVE-2023-30547 Detect
Heuristic for Node apps referencing vm2 sandbox RCE when user code runs. !/usr/bin/env python3 -- coding: utf-8 -- """Heuristic for Node apps referencing vm2 sandbox RCE when user code runs.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
ROOT-APP-NPM-CVE-2026-93605 CVE-2026-93605 in vm2 - Patched by Root
Root has patched CVE-2026-93605 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92958 CVE-2026-92958 in vm2 - Patched by Root
Root has patched CVE-2026-92958 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92940 CVE-2026-92940 in vm2 - Patched by Root
Root has patched CVE-2026-92940 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92959 CVE-2026-92959 in vm2 - Patched by Root
Root has patched CVE-2026-92959 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92935 CVE-2026-92935 in vm2 - Patched by Root
Root has patched CVE-2026-92935 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92944 CVE-2026-92944 in vm2 - Patched by Root
Root has patched CVE-2026-92944 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92955 CVE-2026-92955 in vm2 - Patched by Root
Root has patched CVE-2026-92955 in the vm2 package for Root:npm. Multiple fixed versions available...