vmware-exploitation

Explotación de VMware Una colección de enlaces relacionados con exploits de escape de VMware. Las pull requests son bienvenidas. Sigue a @andreyknvl en Twitter o a @[email protected] en Mastodon para recibir notificaciones de actualizaciones. Investigación 2024 "Encadenando N-days para...

CVE-2026-59346-POC

CVE-2026-59346 — Desbordamiento de entero en TSO de VMXNET3 VMware Workstation / Fusion Prueba de concepto de un desbordamiento de entero de 32 bits en la ruta de segmentación TSO de la NIC virtual VMXNET3 en vmware-vmx, alcanzable desde una VM invitada. Este problema está parcheado. La PoC se...

CVE-2026-87114

A flaw in kube-compare allows a remote attacker to achieve arbitrary code execution on an operator's workstation. When processing a container:// reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of extracting data from a stopped container. This vulner...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-87114: Inclusion of Functionality from Untrusted Control Sphere

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

PT-2026-99931

Name of the Vulnerable Software and Affected Versions kube-compare affected versions not specified Description A flaw exists when processing a container:// reference path, where the tool incorrectly executes the entrypoint of an untrusted container image instead of extracting data from a stopped...

CVE-2026-89066 OS command injection in the task synthesis component in projen

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

CVE-2026-89178

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...

CVE-2026-89178 Howyar｜WeenyGenius - Origin Validation Error

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...

Eris v0.55.1

Eris Eris is a desktop PGP workstation written in Go with Fyne. It stores keys in an encrypted vault and gives you a clean UI for signing, encryption, decryption, and verification. Features...

CVE-2026-89066: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Exploit for CVE-2026-59346

CVE-2026-59346 Donate Help maintain this p...

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 CVSS score: 9.3, is an integer-overflow...

securix v0.19.1

SécurixOS: Secure OS Workstation Base !NOTE This project is in alpha , no support is offered at this time. Objectives SécurixOS is a NixOS distribution developed by DINUM to equip secure computers for system administration, office work and development in order to handle Unprotected information...

VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)

Advisory ID: | VMSA-2026-0007 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 8.1-9.3 Synopsis: | VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities CVE-2026-59346, CVE-2026-59347 Issue date: | 2026-09-03 Updated on: | 2026-09-03 Initial...

PT-2026-85032

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description A stack-based buffer-overflow exists in HGFS. A malicious actor with local administrative privileges on a virtual machine can exploit this to...

VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...