CVE-2026-92937 vm2 3.11.6 Remote Code Execution via Promise call/apply

vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomplete: the bridge gate at lib/bridge.js:1624 identity-checks only the direct call target when deciding whether to rebuild/sanitise a rejected host...

EUVD-2026-81587

vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomplete: the bridge gate at lib/bridge.js:1624 identity-checks only the direct call target when deciding whether to rebuild/sanitise a rejected host...

CVE-2026-92937

vm2 3.11.6 (a Node.js sandboxing library) is vulnerable to a sandbox escape resulting in remote code execution in the host process. The root cause is an incomplete fix for a prior advisory (GHSA-m283-3h24-438v): the bridge gate at lib/bridge.js:1624 only identity-checks the direct call target, so...

CVE-2026-92934 vm2 before 3.11.8 Sandbox Escape RCE via AggregateError

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

EUVD-2026-81584

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-92934

vm2 (a Node.js sandbox library) versions before 3.11.8 contain an incomplete fix for Error.cause sanitization . When a host-wrapped AggregateError object is revisited within a single exception handler traversal in handleException, the cycle detection bypass allows access to unsanitized host proxi...

CVE-2026-92934 vm2 before 3.11.8 Sandbox Escape RCE via AggregateError

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

primefaces

从餐桌到代码：通过餐厅POS系统中的RCE漏洞之旅 这一次，我们偶然发现了一个存在于多个餐厅POS应用程序中的漏洞 XETUX，后者是餐厅监控和自动化解决方案。在巴拿马，它是许多餐厅广泛使用的工具。 该漏洞是一个RCE（远程代码执行），允许攻击者在未经验证的情况下执行代码，并在目标系统上获得权限。 1. 枚举 我们发现Xetux应用程序中存在一个名为primefaces的库，该库用于生成PDF。于是，我们决定在Shodan中搜索以识别潜在目标。 root@kitploit: http.title:"@XETUX" country:PA 搜索结果显示40个结果，全球范围内有334个。...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on devic...

macsurf

最新のウェブを、25 年前の Mac で。 MacSurf は Classic Mac OS 9 PowerPC 向けのウェブブラウザです。CSS3、ES5 JavaScript、アルファチャンネル付き PNG——そのすべてが G3 iMac で動作します。 MacSurf はフルタイムのプロジェクトです。MacSurf のおかげで古い Mac が再びウェブにつながるようになったなら、どんな金額でも開発の継続を支えてくれます。また、Patreon では開発ログで進捗をフォローできます。 サポーター MacSurf はサポーターの皆さんに支えられています——ありがとうございます：...

Outpacket

📦 Outpacket ¿Cansado de impacket? Esta chuleta mapea los flujos de trabajo comunes de impacket a sus alternativas modernas Índice Referencia rápida de autenticación 1. Ejecución remota WMI Exec · wmiexec.py DCOM Exec · dcomexec.py Exec basado en servicios · smbexec.py · psexec.py Exec mediante...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

Moderate: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

fix-react2shell-next

fix-react2shell-next 一条命令修复 Next.js / React RSC 应用中的 CVE-2025-66478 （React 2 Shell RCE）漏洞。 root@kitploit: npx fix-react2shell-next 按照官方公告进行确定性的版本升级。 功能简介 1. 递归扫描 所有 package.json 文件（支持 monorepo） 2. 检查 以下包是否存在易受攻击的版本： next react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack ...

CTFs

CTFs 私が行ったいくつかのサイバーCTFのWriteups / ファイル また、CTFリソース のリストと、多数の一般的なCTFチャレンジを網羅した包括的なチートシート も含めています。 !NOTE このリポジトリのWebミラーが hackback.zip で利用可能になりました。 目次 リソース YouTubeチャンネル 練習 / 学習サイト CTF 一般 Pwn Rev Web Crypto スマートコントラクト クラウド ペネトレーションテスト CTFチートシート フォレンジック / ステガノグラフィ 一般 音声 画像 動画 マシンイメージ Pcap Pwn /...

Important: Red Hat Security Advisory: gstreamer1-plugins-base security update

An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Important: Red Hat Security Advisory: perl-XML-LibXML security update

An update for perl-XML-LibXML is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...