344718 matches found
vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
NodeVM builtin: '' exposes os and dns — process-wide observability reads AND writes that hijack the host sibling class of GHSA-9g8x-92q2-p28f CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor chained with CWE-732 Incorrect Permission Assignment for Critical Resource and...
GHSA-M5W8-4GQ2-6F8X vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
NodeVM builtin: '' exposes os and dns — process-wide observability reads AND writes that hijack the host sibling class of GHSA-9g8x-92q2-p28f CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor chained with CWE-732 Incorrect Permission Assignment for Critical Resource and...
GHSA-M283-3H24-438V VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE
Affected: vm2 = 3.11.3 CVSS 3.1: 9.9 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CWE: CWE-693 Protection Mechanism Failure Prerequisite: Embedder exposes a host function that throws an Error with .cause referencing a powerful host object e.g., process Summary I found that handleException in...
VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE
Affected: vm2 = 3.11.3 CVSS 3.1: 9.9 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CWE: CWE-693 Protection Mechanism Failure Prerequisite: Embedder exposes a host function that throws an Error with .cause referencing a powerful host object e.g., process Summary I found that handleException in...
Exploit for CVE-2026-39154
Wildfire CVE-2026-39154 · Stored XSS in CometChat group m...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Mozilla Firefox
SkeletonKey CVE-2026-6765 · Test only FormAutofill handle...
Security Bulletin: Improper input validation, integer overflow, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service
Summary IBM Storage Defender - Resiliency Service is vulnerable to improper input validation, integer overflow, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message pars...
CVE-2026-73620
creationtimestamp| type| source ---|---|--- 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...
MINI-GFXM-Q3V3-339V
Bulletin has no description...
MINI-C545-QWH8-GPR2
Bulletin has no description...
MINI-P7FQ-X97F-H6XP
Bulletin has no description...
MINI-QQ64-9896-896F
Bulletin has no description...
MINI-JWCG-FXW6-J63J
Bulletin has no description...
MINI-F463-F3QW-JCVJ
Bulletin has no description...
MINI-HHWW-7942-CWXH
Bulletin has no description...
MINI-7G6J-M5HH-9M3J
Bulletin has no description...
MINI-WGHW-JGXM-GHMF
Bulletin has no description...
MINI-658X-4WV3-XF5H
Bulletin has no description...