cve-2025-49131-poc

CVE-2025-49131 - FastGPT Sandbox Escape POC ███████╗ █████╗ ███████╗████████╗ ██████╗ ██████╗ ████████╗ ██╔════╝██╔══██╗██╔════╝╚══██╔══╝██╔════╝ ██╔══██╗╚══██╔══╝ █████╗ ███████║███████╗ ██║ ██║ ███╗██████╔╝ ██║ ██╔══╝ ██╔══██║╚════██║ ██║ ██║ ██║██╔═══╝ ██║ ██║ ██║ ██║███████║ ██║ ╚██████╔╝██║...

ROOT-APP-NPM-GHSA-M5W8-4GQ2-6F8X GHSA-m5w8-4gq2-6f8x in vm2 - Patched by Root

Root has patched GHSA-m5w8-4gq2-6f8x in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root

Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root

Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

CVE-2026-22686 — enclave-vm サンドボックスエスケープ PoC CVE-2026-22686 の概念実証（PoC）エクスプロイトおよびペイロードジェネレーターです。これは enclave-vm の 2.7.0 より前 のバージョンに存在する重大なサンドボックスエスケープ脆弱性であり、ホストの Node.js ランタイム内で任意のコード実行を可能にします。 ⚠️ 免責事項 : このツールは 教育および許可されたセキュリティテストの目的のみ...

PT-2026-103558

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description The sandbox used to isolate document conversion on a Kiteworks appliance fails to fully confine the code executing within it. This allows code already running inside the sandbox to escape i...

Linux Distros Unpatched Vulnerability : CVE-2026-102306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

SUSE SLES16: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:23918-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23918-1 advisory. Update to Firefox Extended Support Release 153.3.0 ESR MFSA 2026-93, bsc1280371: - CVE-2026-92005: Use-after-free in the...

AlmaLinux 9.2 [TuxCare] Security Update: tracker-miners (ALMALINUX9.2:CLSA-2025:1765287210)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765287210 advisory. - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the...

ALSA-2026:73971 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component CVE-2026-75874 firefox: Sandbox escape due to...

AlmaLinux 9.2 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1784988522)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784988522 advisory. - A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-100819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-100778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,...

Linux Distros Unpatched Vulnerability : CVE-2026-100762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird...

Mozilla Thunderbird < 153.4

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-103 advisory. - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixe...

Mozilla Thunderbird < 140.17

The version of Thunderbird installed on the remote Windows host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-102 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in...

Mozilla Thunderbird < 157.0

The version of Thunderbird installed on the remote Windows host is prior to 157.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-101 advisory. - Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153....

RockyLinux 10 : thunderbird (RLSA-2026:73130)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73130 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...

Linux Distros Unpatched Vulnerability : CVE-2026-100786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,...

Linux Distros Unpatched Vulnerability : CVE-2026-100818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,...