Lucene search
+L

44660 matches found

EUVD
EUVD
added 2026/05/05 4:33 p.m.13 views

EUVD-2026-26987

VM2 Has Sandbox Breakout Through Inspect Function...

9.8CVSS5.8AI score0.01186EPSS
SaveExploits1References6
OSV
OSV
added 2026/05/05 4:33 p.m.10 views

GHSA-V37H-5MFM-C47C VM2 Has Sandbox Breakout Through Inspect Function

Summary VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. Details The node inspect method allows to log details of objects. To get to the...

9.8CVSS6.2AI score0.01186EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2026/05/05 4:33 p.m.16 views

VM2 Has Sandbox Breakout Through Inspect Function

Summary VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. Details The node inspect method allows to log details of objects. To get to the...

9.8CVSS6.2AI score0.01186EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2026/05/05 4:23 p.m.18 views

VM2 Has Sandbox Breakout Through Promise Species

Summary The fix for https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5 is insufficient and can be circumvented allowing attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. Details The fix for...

9.8CVSS6.5AI score0.00896EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/05/05 4:23 p.m.32 views

GHSA-QVJJ-29QF-HP7P VM2 Has Sandbox Breakout Through Promise Species

Summary The fix for https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5 is insufficient and can be circumvented allowing attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. Details The fix for...

9.8CVSS6.5AI score0.00896EPSS
SaveExploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/05 3:27 p.m.13 views

Malicious code in @bold-commerce/stacks-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc580455dc6abd5d1a25634543e82bc51cf855c3494024397eb17d4c7fc1eff The package @bold-commerce/stacks-ui was found to contain malicious code. Source: ghsa-malware...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/05/05 3:20 p.m.12 views

MAL-2026-3341 Malicious code in runtime-probe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0253bd4b8dc52c1fc510a9355b9d4178b7e891c7fc0226537a8769dffcef6d89 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/05 3:20 p.m.12 views

Malicious code in runtime-probe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0253bd4b8dc52c1fc510a9355b9d4178b7e891c7fc0226537a8769dffcef6d89 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/05/05 3:14 p.m.10 views

MAL-2026-3342 Malicious code in runtime-readout (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db23da97c424ee374983aaaa3b955d423abe32f91c024f372142dc234ae522d3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/05 3:14 p.m.19 views

Malicious code in runtime-readout (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db23da97c424ee374983aaaa3b955d423abe32f91c024f372142dc234ae522d3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

5.9AI score
SaveExploits0References1
Snyk
Snyk
added 2026/05/05 12:26 p.m.13 views

Interpretation Conflict

Overview org.webjars.npm:fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Interpretation Conflict during the decoding of URL host component. An attacker can manipulate the authority component of a URI by supplying percent-encoded delimiters,...

8.7CVSS5.8AI score0.00475EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/05 12:26 p.m.15 views

Interpretation Conflict

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Interpretation Conflict during the decoding of URL host component. An attacker can manipulate the authority component of a URI by supplying percent-encoded delimiters, causing the host ...

8.7CVSS5.8AI score0.00475EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/05 12:16 p.m.15 views

CVE-2026-43533

OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through...

8.9CVSS0.00369EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/05 12:16 p.m.14 views

CVE-2026-43532

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media...

7.7CVSS0.00259EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/05 11:57 a.m.12 views

CVE-2026-24781

A flaw was found in vm2, an open-source virtual machine VM sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the inspect function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity a...

9.8CVSS6.3AI score0.01186EPSS
SaveExploits1References8
OSV
OSV
added 2026/05/05 11:25 a.m.7 views

CVE-2026-43532 OpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media...

4.9CVSS5.9AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/05 11:25 a.m.5 views

CVE-2026-43532

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media...

7.7CVSS5.8AI score0.00259EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/05/05 11:25 a.m.22 views

CVE-2026-43532

OpenClaw 2026.4.7

7.7CVSS5.8AI score0.00259EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/05/05 11:24 a.m.11 views

EUVD-2026-27259

OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file disclosure. Attackers with denied read access via toolsBySender or group policy can trigger host-media attachment loading ...

7.7CVSS5.8AI score0.00236EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/05 11:24 a.m.8 views

CVE-2026-42438 OpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment Reads

OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file disclosure. Attackers with denied read access via toolsBySender or group policy can trigger host-media attachment loading ...

7.7CVSS5.8AI score0.00236EPSS
SaveExploits0References3
Rows per page
Query Builder