107 matches found
CVE-2026-116370
A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...
CVE-2026-116370
A type confusion vulnerability exists in the Lua sandbox component of 2K Games Sid Meier's Civilization IV version 1.0.12.68 . The flaw specifically affects the loadstring function, which can be exploited via manipulation to initiate a remote attack. While the documents confirm that an exploit ha...
EUVD-2026-109977
A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...
CVE-2025-46818
CVE-2025-46818 – Redis Lua Sandbox Cross-User Escape Sandbox escape via deprecated Lua APIs and mutable metatables on Redis 8.2.1. Overview Redis 8.2.1 keeps deprecated Lua builtins getfenv, setfenv, newproxy exposed to scripts and fails to lock metatables for basic types. An attacker can inject...
CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-
CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" local a = 1 end...
CVE-2022-0543
CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...
CVE-2026-116111
A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-116111 2K Games Civilization V Lua Sandbox loadstring type confusion
A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-116111
A type confusion vulnerability exists in the Lua Sandbox component of 2K Games Civilization V 1.0.3.144 . The issue specifically affects the loadstring function, where a remote manipulation can trigger the flaw. Exploitation has been publicly disclosed and may be utilized; however, the vendor has...
EUVD-2026-109603
A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The...
CVE-2022-0543-Home-Lab
CVE-2022-0543 — Redis Lua Sandbox Escape Remote Code Execution CVE‑2022‑0543 — Redis Lua Sandbox Escape คืออะไร? ช่องโหว่นี้เกิดเฉพาะบน Redis ที่ติดตั้งผ่าน Debian / Ubuntu package เท่านั้น เพราะ Redis ถูกคอมไพล์พร้อม Lua engine แบบ dynamic module lua-cjson, lua-bitop ทำให้ผู้โจมตีสามารถเรียกใช้:...
CVE-2022-0543
CVE-2022-0543 Fully featured exploit for Redis RCE through Lua Sandbox Escape vulnerability. Based on https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Features: Automatic reverse shell -I + -P Single command execution -x Basic shell Default ...
Redis 5.0.7 Lua Sandbox Escape
Redis version 5.0.7 as packaged by Debian and Ubuntu leaves the Lua package global accessible, allowing EVAL scripts to load Lua's io module and execute host commands. The supplied environment and proof of concept demonstrate CVE-2022-0543. https://packetstorm.news/download/234982...
CVE-2022-0543
CVE-2022-0543 - Redis Lua サンドボックスエスケープによるリモートコード実行 Debian/Ubuntu CVE-2022-0543 は、DebianベースのLinuxディストリビューション （DebianやUbuntuを含む）上のRedisに影響を与える重大なセキュリティ脆弱性です。この脆弱性はパッケージングの欠陥に起因し、Luaサンドボックスエスケープ を引き起こします。その結果、影響を受けるシステム上でリモートコード実行（RCE）が可能になります。 アップストリームのRedis自体は脆弱ではありません —...
CVE-2022-0543
CVE-2022-0543 适用于通过Lua沙盒逃逸漏洞进行Redis RCE的完整利用程序。基于 https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/。 功能: 自动反向Shell -I + -P 单条命令执行 -x 基本Shell 默认 待办: 需要更好的检测机制以防止误报 免责声明: 此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面授权利用的系统上使用此脚本。...
Astra Linux – Vulnerability in Redis
It was discovered that Redis, a persistent key-value database, due to a packaging issue, is susceptible to a Lua sandbox escape that is specific to Debian. This could lead to remote code execution...
CVE-2026-45770
A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...
SUSE CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
Linux Distros Unpatched Vulnerability : CVE-2026-45763
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...
Linux Distros Unpatched Vulnerability : CVE-2026-45770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...