334 matches found
CVE-2020-7453
In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jailset configuration option "osrelease" may return more bytes with a subsequent jailget system call allowing a...
CVE-2020-25584
In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser inside a FreeBSD jail configured with the non-default allow.mount permission could cause a race condition between the...
CVE-2024-22036
A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...
CVE-2024-22036
CVE-2024-22036 describes a vulnerability in Rancher where a cluster/node driver can escape the chroot jail and gain root access to the Rancher container itself, with potential privilege escalation within the container and, in test/dev environments, possible escape to the host. The issue affects R...
CVE-2025-24796 Remote Code Execution within Collabora Online jail with Macros Enabled
Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...
CVE-2025-24796 Remote Code Execution within Collabora Online jail with Macros Enabled
Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...
CVE-2025-24796
CVE-2025-24796 affects Collabora Online. When macros are enabled, Collabora Online can download and execute arbitrarily provided binaries inside the jail, potentially bypassing network access restrictions and allowing code execution within the document‑hosted environment. The issue is mitigated b...
CVE-2025-24796 Remote Code Execution within Collabora Online jail with Macros Enabled
Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...
Collabora Online 安全漏洞
Collabora Online is an application from Collabora UK. A powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats. A security vulnerability exists in Collabora Online versions 24.04.12.4, 23.05.19, 22.05.25 and earlier, which stems from a...
Rancher Remote Code Execution via Cluster/Node Drivers
Impact A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...
GHSA-H99M-6755-RGWC Rancher Remote Code Execution via Cluster/Node Drivers
Impact A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...
PT-2024-19169 · Rancher +1 · Rancher +1
Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.7.16 Rancher versions prior to 2.8.9 Rancher versions prior to 2.9.3 Description: A vulnerability has been identified in Rancher where a cluster or node driver can be used to escape the chroot jail and gain root...
69,000 Bitcoins Are Headed for the US Treasury—While the Agent Who Seized Them Is in Jail
The $4.4 billion in crypto is set to be the largest pile of criminal proceeds ever sold off by the US. The former IRS agent who seized the record-breaking sum, meanwhile, languishes in a Nigerian jail cell...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
CVE-2024-34313
Summary: CVE-2024-34313 affects VPL Jail System up to v4.0.2. A path traversal flaw in the jail server allows an attacker to craft requests to a public endpoint to write arbitrary files to the host filesystem, enabling potential privilege escalation (e.g., via overwriting /etc/ld.so.preload). The...
PT-2024-25785 · Unknown · Vpl Jail System
Name of the Vulnerable Software and Affected Versions: VPL Jail System versions up to 4.0.2 Description: The issue allows attackers to execute a directory traversal via a crafted request to a public endpoint. Recommendations: For VPL Jail System versions up to 4.0.2, update to a version later tha...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
VPL-JAIL-SYSTEM Security Vulnerability
VPL-JAIL-SYSTEM is a library by the individual developer of jcrodriguez-dis. Provides an execution sandbox for the VPL Moodle plugin. A security vulnerability exists in VPL-JAIL-SYSTEM v4.0.2 and earlier versions, which stems from a path traversal issue...
