CVE-2022-0543

CVE-2022-0543 Exploit complet pour le RCE Redis via la vulnérabilité d'évasion du bac à sable Lua. Basé sur https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Fonctionnalités : Reverse shell automatique -I + -P Exécution d'une commande unique ...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua Sandbox Escape Remote Code Execution CVE‑2022‑0543 — Redis Lua Sandbox Escape ما هو؟ تنشأ هذه الثغرة فقط في Redis المثبّت عبر حزمة Debian / Ubuntu لأن Redis يُجمّع مع محرك Lua كمكتبة ديناميكية lua-cjson, lua-bitop، مما يسمح للمهاجم باستخدام: root@kitploit: package.loadli...

CVE-2025-46818

CVE-2025-46818 – Évasion du bac à sable Lua de Redis entre utilisateurs Évasion du bac à sable via des API Lua obsolètes et des métatables mutables sur Redis 8.2.1. Présentation Redis 8.2.1 conserve les fonctions intégrées Lua obsolètes getfenv, setfenv, newproxy exposées aux scripts et ne...

CVE-2022-0543

CVE-2022-0543 - Exécution de code à distance par échappement du bac à sable Lua de Redis Debian/Ubuntu CVE-2022-0543 est une vulnérabilité de sécurité critique affectant Redis sur les distributions Linux basées sur Debian y compris Debian et Ubuntu. Elle est causée par un défaut d'empaquetage qui...

Redis-RCE-x-HTB

Redis RCE Toolkit Educational / Authorized Lab Use Only...

cve-poc-collection

CVE PoC Vulnerability Reproduction Collection This repository...

Astra Linux – Vulnerability in Redis

It was discovered that Redis, a persistent key-value database, due to a packaging issue, is susceptible to a Lua sandbox escape that is specific to Debian. This could lead to remote code execution...

SUSE CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

DEBIAN-CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

CVE-2026-41196 Luanti has a mod security sandbox escape

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

SUSE CVE-2026-40959

Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod...

CVE-2026-40959

Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod...

CVE-2026-40959

CVE-2026-40959 affects Luanti 5.x prior to 5.15.2. When using LuaJIT, a crafted mod can cause a Lua sandbox escape. The issue is described in multiple sources as Luanti 5 before 5.15.2, with the sandbox escape vulnerability carrying a high impact in CVSS (high confidentiality, integrity, and avai...

PT-2026-33197

Name of the Vulnerable Software and Affected Versions Luanti versions 5.0 through 5.15.1 Description A sandbox escape exists when LuaJIT is used, allowing a crafted mod to execute arbitrary code outside the game engine. Recommendations Update to version 5.15.2...

Fedora 43 : libinput (2026-5aafda8cd8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5aafda8cd8 advisory. libinput 1.30.3, fixes Lua plugin sandbox escape CVE-2026-35093,CVE-2026-35094 Tenable has extracted the preceding description block directly from t...

CVE-2025-41688

CVE-2025-41688 describes a high-privilege RCE via an undocumented method that escapes the LUA sandbox, enabling execution of arbitrary OS commands. Reported impact includes total system compromise with network access as the attack vector and no user interaction required. Affected products noted i...

CVE-2025-41688 High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

CVE-2025-41688 High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

K000136079: Redis vulnerability CVE-2022-0543

Security Advisory Description It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in remote code execution. CVE-2022-0543 Impact There is no impact; F5 products are not affected by this...