CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

zyrox

Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...

lfi

Lightweight Fault Isolation LFI Welcome to the top-level repository for the Lightweight Fault Isolation LFI project. What is LFI? LFI is a system for sandboxing native code. Like WebAssembly and Native Client, LFI isolates sandboxed code in-process i.e., in the same address space as a host...

rex

| | \ / / | | | | | | | | \ / | | \ / / / \ ' / | |/ | ' / | | | || / | | \ \ | | | | \ \ || \//\ |//\\|| ||/|/|| ||/ Rex Kernel Extensions Table of Contents What is Rex Example program Build and run Documentations Why Rex License What is Rex Rex is a safe and usable kernel extension...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

NPM: vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

NPM: vm2 allows a sandboxed plugin to execute native code through node:sqlite vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

Summary vm2 3.11.6 exposes Node.js's host node:sqlite module to NodeVM code when that builtin is allowed explicitly or through builtin: ''. The module is wrapped as read-only, but callable methods retain host-process authority. A sandboxed plugin can construct an in-memory database with extension...

vm2 crypto builtin loads attacker native code through setEngine

Summary vm2 3.11.6 exposes the host crypto module to a NodeVM when that single builtin is allowed. The module is presented through a read-only bridge, but its functions still execute with host-process authority. crypto.setEngine accepts a filesystem path and asks OpenSSL to dynamically load the...

NPM: vm2 crypto builtin loads attacker native code through setEngine

NPM: vm2 crypto builtin loads attacker native code through setEngine vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

PT-2026-97130

Name of the Vulnerable Software and Affected Versions Nuclei versions 3.0.0 through 3.9.9 Description An out-of-bounds heap write in the Goja JavaScript runtime embedded in the javascript: protocol under pkg/js/ allows arbitrary native code execution on the host running the scanner. This occurs...

CVE-2026-93451 snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned lengt...

CVE-2026-93451 snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned lengt...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure in the node:sqlite module exposure within the sandbox environment when certain builtins are permitted. An attacker can...

Process Control

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Process Control in the crypto.setEngine function. An attacker can execute arbitrary native code in the host process by supplying a path to a maliciou...

Duplicate Advisory: vm2 3.11.6 allows a sandboxed plugin to execute native code through `node:sqlite`

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6w8r-xxw2-g3hx. This link is maintained to preserve external references. Original Description vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that built...

Duplicate Advisory: vm2 crypto builtin loads attacker native code through setEngine

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-46pr-c5wc-xffx. This link is maintained to preserve external references. Original Description vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is...

CVE-2026-92938

vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitly or through builtin: ''. The module is wrapped with vm.readonly, which prevents property assignment but leaves host-authority callables reachable;...

CVE-2026-92939

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy, but its callable exports still execute with host-process authority. Sandboxed JavaScript can therefore call...

CVE-2026-92939 vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy, but its callable exports still execute with host-process authority. Sandboxed JavaScript can therefore call...

CVE-2026-92939 vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine

vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy, but its callable exports still execute with host-process authority. Sandboxed JavaScript can therefore call...