28974 matches found
brokentooth
brokentooth POC para CVE-2018-4327 al menos eso creo, ya que @SparkZheng discutió tanto CVE-2018-4327 como CVE-2018-4330, pero no queda claro por su parte cuál se relaciona con cada bug; pero como describió este primero, me lanzo a adivinar. Probado en iPhone 6S 11.3.1 Debería funcionar hasta 11....
CLEANSTART-2026-MN51569 tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory
Security vulnerability affects the buildkitd package. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory...
Redis 5.0.7 Lua Sandbox Escape
Redis version 5.0.7 as packaged by Debian and Ubuntu leaves the Lua package global accessible, allowing EVAL scripts to load Lua's io module and execute host commands. The supplied environment and proof of concept demonstrate CVE-2022-0543. https://packetstorm.news/download/234982...
CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw exists in ansible-core where the archive extractor used in ansible-galaxy collection install validates member paths using lexical path normalization (os.path.abspath ) instead of resolving symbolic links (os.path.realpath ). Because the system performs no containment check on symlink-typed...
Exploit for Missing Authorization in Redis
Redis Lua Sandbox Escape CVE-2022-0543 Vulhubhttps://vul...
Exploit for CVE-2015-1427
Elasticsearch Groovy Sandbox Bypass CVE-2015-1427 Vulhub...
GHSA-PC5Q-QFXP-GGQV Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass
Summary The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail for every octal escape sequence and return a null byte instead of the...
Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass
Summary The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail for every octal escape sequence and return a null byte instead of the...
firefox: thunderbird: Sandbox escape in the Remote Settings Client component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...
firefox: Sandbox escape due to use-after-free in the DOM: Security component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root
Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root
Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-M5W8-4GQ2-6F8X GHSA-m5w8-4gq2-6f8x in vm2 - Patched by Root
Root has patched GHSA-m5w8-4gq2-6f8x in the vm2 package for Root:npm. Multiple fixed versions available...
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
firefox: Sandbox escape due to use-after-free in the DOM: Security component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...
firefox: thunderbird: Sandbox escape in the Remote Settings Client component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...