CVE-2020-11022-CVE-2020-11023

CVE-2020-11022 CVE-2020-11023 jQuery 버전 1.2 이상, 3.5.0 미만에서 신뢰할 수 없는 소스의 HTML살균 처리 후에도을 jQuery의 DOM 조작 메서드예: .html, .append 등에 전달하면 신뢰할 수 없는 코드가 실행될 수 있습니다. 이 문제는 jQuery 3.5.0에서 패치되었습니다. jQuery 버전 1.0.3 이상, 3.5.0 미만에서 신뢰할 수 없는 소스의 요소를 포함한 HTML살균 처리 후에도을 jQuery의 DOM 조작 메서드예: .html, .append 등에 전달하면...

goBox

goBox Sandbox GO per eseguire codice non fidato. goBox usa Ptrace per agganciarsi alle syscall READ, dandoti la possibilità di accettare o rifiutare le syscall prima che vengano eseguite. Utilizzo root@kitploit: Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern...

codejail

CodeJail CodeJail अविश्वसनीय कोड को सुरक्षित सैंडबॉक्स में निष्पादित करने का प्रबंधन करता है। यह मुख्य रूप से Python निष्पादन के लिए डिज़ाइन किया गया है, लेकिन अन्य भाषाओं के लिए भी उपयोग किया जा सकता है। सुरक्षा AppArmor के साथ लागू की जाती है। यदि आपका ऑपरेटिंग सिस्टम AppArmor का समर्थन नहीं कर...

sandboxec

sandboxec Un sandbox per comandi leggero per Linux, costruito su Landlock. Nessun demone. Nessun root. Nessun passaggio di creazione immagine. Usalo per eseguire comandi rischiosi con un raggio di esplosione più ridotto: CLI di terze parti, script non fidati, codice generato e strumenti usa e...

vm2

vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 è una sandbox che può eseguire codice non attendibile con i moduli built-in di Node consentiti. Importante avvertenza sulla sicurezza Prima di...

capsule

Capsule Per Iniziare • Documentazione • Problemi • Contribuire Panoramica Capsule è un runtime per eseguire codice non fidato in ambienti isolati. Ogni task viene eseguito all'interno del proprio sandbox WebAssembly, fornendo: Esecuzione isolata : Ogni task viene eseguito in modo isolato dal...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of servi...

CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of servi...

CVE-2026-65081

NVIDIA NemoClaw for Linux is affected by a vulnerability in its installation process that allows an attacker to cause execution of untrusted code. A successful exploit may lead to code execution , privilege escalation , data tampering , information disclosure , and denial of service . The CNA-ass...

EUVD-2026-66099

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, information disclosure, and denial of servi...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

EUVD-2026-62704

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...

BIT-JRE-2026-47035

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

BIT-JRE-2026-47030

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

PHP_CodeSniffer gitblame report command injection via crafted filename

Impact PHPCodeSniffer versions before v3.13.6 and v4.0.2 contain a command injection vulnerability in the code creating the Gitblame, Hgblame and Svnblame reports. As a result, running PHPCodeSniffer over untrusted files, for example, in a CI pipeline that scans pull requests, or on a developer...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

openjdk: Enhance XBM image support (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...