CVE-2022-29072

معلومات لم أنشر أي كود إثبات PoC لأي هجوم رفع صلاحيات في أي مكان. أكواد الإثبات الموجودة لا علاقة لها برفع الصلاحيات. لمعلوماتك. حول 7-Zip 7-Zip هو أرشيف ملفات مجاني ومفتوح المصدر. الإصدار موجه الأوامر من 7-Zip مُصمم للأنظمة الشبيهة بيونكس، بل وحتى أميغا أو إس AmigaOS ضمن هذه القائمة. كما أنه...

r77-rootkit

r77 Rootkit Fileless ring 3 rootkit r77 is a ring 3 rootkit that hides everything: Files, directories Processes & CPU/GPU usage Registry keys & values Services TCP & UDP connections Junctions, named pipes, scheduled tasks Hiding by prefix Everything that starts with "$77" is hidden. Configuration...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

CVE-2019-11708

سلسلة استغلال كاملة لـ CVE-2019-11708 و CVE-2019-9810 هذه سلسلة استغلال كاملة للمتصفح CVE-2019-11708 و CVE-2019-9810 تستهدف Firefox على Windows 64-bit. تستخدم CVE-2019-9810 للحصول على تنفيذ كود في كل من عملية المحتوى وعملية الأصل، و CVE-2019-11708 لخداع عملية الأصل للتصفح إلى URL عشوائي. لقد قمت...

Astra Linux – Vulnerability in Thunderbird

The parent process does not properly check whether the Speech Synthesis feature is enabled when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

CVE-2025-55182-Exploit

React2Shell CVE-2025-55182 - مختبر Docker القابل للاختراق تطبيق Next.js ضعيف عمدًا يوضح تنفيذ الأوامر عن بُعد RCE عبر معالجة غير آمنة للعمليات الفرعية Child Process. صُمم هذا المختبر لأغراض تعليمية واختبار الأمان. ⚠️ تحذير: لا تقم بتشغيل هذا على خادم مواجه للعامة. إنه يحتوي على ثغرة تنفيذ أوامر عن...

PT-2026-105468

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8686-vhfx-7r3j. This link is maintained to preserve external references. Original Description vm2 through 3.11.6 does not normalize node:-prefixed builtin specifiers when evaluating user-supplied negative deny...

Malicious code in laycot (npm)

This package is part of a malicious npm campaign published by the laycot account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and...

PT-2026-93169

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

Astra Linux – Vulnerability in Apache2

A path handling issue in moddavfs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child processes to crash. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

MAL-2026-15913 Malicious code in taskforge-8xv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8c18d7b4343e4c1d39e62a7d19eb9c5a9b4beb369fde301103623c3a7f0651 The package's sole function is a runtime loader that fetches a JavaScript payload from a configured origin's /api/x-handler endpoint and executes it ...

MAL-2026-15870 Malicious code in vitest-cli-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...

PT-2026-95384

Name of the Vulnerable Software and Affected Versions vm2 NodeVM versions prior to 3.12.1 Description A sandbox escape exists because the DANGEROUS BUILTINS denylist fails to include child process, even though other modules capable of spawning host processes are blocked. This allows attackers to...

Malicious Package

Overview bellatrix-quantum-inquirer-child-process is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizati...

Malicious Package

Overview bellatrix-child-process-playwright-geodynamo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

PT-2026-83273

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-76227

A flaw was found in Renovate. The application fails to restrict environment variables when it creates new child processes. This oversight allows these child processes, such as those used for package installation or post-upgrade tasks, to access all environment variables of the main Renovate...