10 matches found
cve-2025-55182
침투 테스트 라이트업: Next.js RCE 및 Node.js Inspector 권한 상승 이 기술 라이트업은 취약한 Next.js 웹 애플리케이션을 호스팅하는 대상을 손상시키고, 수집한 자격 증명을 통해 초기 접근을 달성하며, 잘못 구성된 로컬 Node.js V8 인스펙터를 활용하여 루트 권한 상승을 수행하는 공격 경로를 상세히 설명합니다. 1단계: 외부 정찰 및 웹 익스플로잇 초기 푸팅프린팅 대상은 표준 HTTP/HTTPS 포트80/443에서 실행되는 Next.js 웹 애플리케이션을 호스팅합니다. 표준 디렉터리 열거 및 수...
CVE-2023-7080
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...
GHSA-F8MP-X433-5WPF Arbitrary remote code execution within `wrangler dev` Workers sandbox
Impact The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run...
Arbitrary remote code execution within `wrangler dev` Workers sandbox
Impact The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run...
Remote Code Execution
wrangler is vulnerable to Remote Code Execution. The vulnerability is caused due to V8 inspector intentionally allowing arbitrary code execution within Workers sandbox for debugging purpose. The wrangler dev server starts an inspector listening on all network interfaces. This allows an attacker t...
CVE-2023-7080
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...
Design/Logic Flaw
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...
CVE-2023-7080 Arbitrary remote code execution within wrangler dev Workers sandbox
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...
CVE-2023-7080
The CVE-2023-7080 issue concerns the V8 inspector in Wrangler (wrangler dev) that could be reached on all network interfaces, enabling a local-network attacker to connect to the inspector and execute arbitrary code within the Workers sandbox. Root causes cited include the inspector server not val...
CVE-2023-7080 Arbitrary remote code execution within wrangler dev Workers sandbox
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary cod...