662 matches found
CVE-2023-30547
CVE-2023-30547 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to esca...
CVE-2022-36067-vm2-POC-webapp
CVE-2022-36067-vm2-POC-webapp Steps to reproduce 1. maybe install vm2 globally first npm -install [email protected] -g 2. run: node index.js 3. visit http://localhost:5000/poc 4. Upload poc file such as poc2.js or code and observe RCE...
CVE-2023-30547
CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...
vm2
vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node permitidos en la lista blanca. Instalaciónsh npm instal...
Node_CVE-2023-29017
CVE-2023-29017 | Ejecución remota de código mediante escape de sandbox vm2 WHS 4th 31st Class - Kim Geonwoo @gunwoo105 Resumen de la vulnerabilidad vm2 es una biblioteca de sandbox para Node.js que permite ejecutar JavaScript no confiable en un entorno restringido. En condiciones normales, el...
CVE-2023-30547
CVE-2023-30547 Descripción de la vulnerabilidad vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node en lista blanca. Existe una vulnerabilidad en la sanitización de excepciones de vm2 para versiones hasta la 3.9.16, que permite a los atacantes lanzar una...
ROOT-APP-NPM-CVE-2026-44004 CVE-2026-44004 in vm2 - Patched by Root
Root has patched CVE-2026-44004 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26956 CVE-2026-26956 in vm2 - Patched by Root
Root has patched CVE-2026-26956 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10721 AIKIDO-2026-10721 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10721 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10726 AIKIDO-2026-10726 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10726 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in vm2 - Patched by Root
Root has patched CVE-2026-44001 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47210 CVE-2026-47210 in vm2 - Patched by Root
Root has patched CVE-2026-47210 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44000 CVE-2026-44000 in vm2 - Patched by Root
Root has patched CVE-2026-44000 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-43997 CVE-2026-43997 in vm2 - Patched by Root
Root has patched CVE-2026-43997 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47137 CVE-2026-47137 in vm2 - Patched by Root
Root has patched CVE-2026-47137 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10846 AIKIDO-2026-10846 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10846 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10729 AIKIDO-2026-10729 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10729 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10716 AIKIDO-2026-10716 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10716 in the vm2 package for Root:npm. Multiple fixed versions available...