1716 matches found
CVE-2026-49143 BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler
BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, which passes user-supplied data to vm.runInNewContex...
CVE-2026-49143
CVE-2026-49143 affects BrowserStack Runner up to version 0.9.5. The vulnerability is in the /_log HTTP handler, permitting unauthenticated, network-adjacent attackers to achieve remote code execution by sending crafted JSON bodies that are passed to vm.runInNewContext() with eval(); attackers can...
CVE-2026-49143
BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, which passes user-supplied data to vm.runInNewContex...
CVE-2026-49143 BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler
BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, which passes user-supplied data to vm.runInNewContex...
BrowserStack Runner 路径遍历漏洞
BrowserStack Runner is an open-source browser testing command-line tool developed by BrowserStack. Versions of BrowserStack Runner prior to 0.9.5 contained a path traversal vulnerability. This vulnerability originated from the default HTTP handler in lib/server.js, which allowed for path traversa...
BrowserStack Runner 代码注入漏洞
BrowserStack Runner is an open-source browser testing command-line tool developed by BrowserStack. Versions of BrowserStack Runner prior to 0.9.5 contained a code injection vulnerability. This vulnerability stems from the log HTTP handler, where data provided by users is passed to...
CVE-2026-49144: Improper Limitation of a Pathname to a Restricted Directory
BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the default HTTP handler in lib/server.js that allows unauthenticated network-adjacent attackers to read arbitrary files. Attackers can exploit the unauthenticated HTTP server bound on all interfaces to traverse outside...
CVE-2026-49143: Improper Control of Generation of Code
BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, which passes user-supplied data to vm.runInNewContex...
PT-2026-45857
Name of the Vulnerable Software and Affected Versions BrowserStack Runner versions prior to 0.9.6 Description An issue in the / log HTTP handler allows unauthenticated network-adjacent attackers to execute arbitrary code on the host system. The handler processes JSON request bodies by passing...
cyanide
Cyanide By @zeroxjf — an iOS...
GHSA-5P55-QCQV-882W vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-WGQ9-QP63-G8J3 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-R38R-HVG8-XQHF vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-1402 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6713 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-8716 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-R38R-HVG8-XQHF vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips...
GHSA-WGQ9-QP63-G8J3 vulnerabilities
Vulnerabilities for packages: gitlab-cng, gitlab-runner, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips...