ROOT-APP-NPM-AIKIDO-2026-10719 AIKIDO-2026-10719 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10719 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47141 CVE-2026-47141 in vm2 - Patched by Root

Root has patched CVE-2026-47141 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2023-30547

CVE-2023-30547 이것은 CVE-2023-30547https://nvd.nist.gov/vuln/detail/CVE-2023-30547에 대한 개념 증명PoC입니다. CTF 중에 이 PoC를 만들었습니다. 사용법 root@kitploit: CVE-2023-30547 PoC -h --url URL --lhost LHOST --lport LPORT PoC for the vm2 vulnerability CVE-2023-30547 options: -h, --help show this help message and exit...

Codify-TJNULL-OSCP-

Hack The Box — Codify 攻略記事 Hack The Box の Codify マシンに対する、完全なペネトレーションテストのウォークスルーと攻略記事です。 📌 マシン情報 項目| 値 ---|--- 名前| Codify OS| Linux 難易度| Easy 主要概念| vm2 RCE CVE-2023-30547、SQLite DB 列挙、Bcrypt クラッキング、Bash ワイルドカードパターンマッチングの悪用 🛠️ 概要 / 攻撃チェーン root@kitploit: Nmap Scan: Ports 22, 80, 3000 ➡️ Node.js...

CVE-2022-36067-vm2-POC-webapp

CVE-2022-36067-vm2-POC-webapp 재현 단계 1. 먼저 vm2를 전역으로 설치하세요 npm -install [email protected] -g 2. 실행: node index.js 3. http://localhost:5000/poc 방문 4. poc 파일예: poc2.js 또는 코드를 업로드하고 RCE를 확인하세요...

Node_CVE-2023-29017

CVE-2023-29017 | vm2 Sandbox Escape를 통한 원격 코드 실행 WHS 4기 31반 - 김건우@gunwoo105 취약점 요약 vm2는 신뢰할 수 없는 JavaScript를 제한된 환경에서 실행하기 위한 Node.js 샌드박스 라이브러리입니다. 정상적인 경우 샌드박스 내부의 코드는 Node.js의 process, require, childprocess 및 호스트 파일시스템과 같은 민감한 기능에 접근할 수 없어야 합니다. 그러나 vm2 3.9.14 이하에서는 처리되지 않은 비동기 오류가 발생할 때...

vm2 v3.11.8

vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...

ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root

Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-47686

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

CVE-2026-47698

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and...

CVE-2026-47683

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683 vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683 vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683 vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683

In vm2

EUVD-2026-60461

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47686 vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

CVE-2026-47686 vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

CVE-2026-47686

The GHSA advisory confirms vm2

CVE-2026-47698 vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and...