1680 matches found
CVE-2026-100721
CVE-2026-100721 — vm2 NodeVM external allowlist bypass Python 3 PoC for CVE-2026-100721 — vm2 npm before 3.12.2 incorrect authorization in the NodeVM external-module resolver , leading to sandbox escape and host-side code execution when untrusted JavaScript runs inside a misconfigured embedder. P...
CVE-2023-30547
CVE-2023-30547 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to esca...
CVE-2023-30547
CVE-2023-30547 This is a Proof-of-Concept to CVE-2023-30547 https://nvd.nist.gov/vuln/detail/CVE-2023-30547. I created this PoC during a CTF. Usage CVE-2023-30547 PoC -h --url URL --lhost LHOST --lport LPORT PoC for the vm2 vulnerability CVE-2023-30547 options: -h, --help show this help message a...
CVE-2023-30547
CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...
CVE-2023-30547
CVE-2023-30547 Vulnerability description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException...
Codify-TJNULL-OSCP-
Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...
Node_CVE-2023-29017
CVE-2023-29017 | Remote Code Execution via vm2 Sandbox Escape WHS 4th Generation, Class 31 - Kim Geon-woo @gunwoo105 Vulnerability Summary vm2 is a Node.js sandbox library for executing untrusted JavaScript in a restricted environment. Under normal circumstances, code inside the sandbox should no...
n8n-function-vm2
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · n8n-function-vm2 n8n-function-vm2 n8n 2.42.0 - n8n GmbH GHSA-j4p8-h8mh-rh8q moved n8n-nodes-base.code onto the JS task-runner child. Production spawn adds --disallow-code-generation-from-strings and...
CVE-2022-36067-vm2-POC-webapp
CVE-2022-36067-vm2-POC-webapp Steps to reproduce 1. maybe install vm2 globally first npm -install [email protected] -g 2. run: node index.js 3. visit http://localhost:5000/poc 4. Upload poc file such as poc2.js or code and observe RCE...
ROOT-APP-NPM-CVE-2026-92948 CVE-2026-92948 in vm2 - Patched by Root
Root has patched CVE-2026-92948 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92950 CVE-2026-92950 in vm2 - Patched by Root
Root has patched CVE-2026-92950 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-92951 CVE-2026-92951 in vm2 - Patched by Root
Root has patched CVE-2026-92951 in the vm2 package for Root:npm. Multiple fixed versions available...
CVE-2026-100721
A flaw was found in vm2. An attacker running untrusted guest code inside the sandbox can escape isolation and achieve arbitrary code execution on the underlying host system. When an application configures a custom external module resolver, vm2 fails to enforce strict file path boundaries when...
CLSA-2026-1791888184 TuxCare security update for vm2 (2 CVEs)
TuxCare rebuilt vm2 to address 2 CVEs. Fixed in 3.11.5-tuxcare.8...
CLSA-2026-1791888008 TuxCare security update for vm2 (1 CVE)
TuxCare rebuilt vm2 to address 1 CVE. Fixed in 3.11.7-tuxcare.3...
CLSA-2026-1791887363 TuxCare security update for vm2 (1 CVE)
TuxCare rebuilt vm2 to address 1 CVE. Fixed in 3.10.0-tuxcare.8...
vm2
vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node permitidos en la lista blanca. Instalaciónsh npm instal...
CLSA-2026-1791666662 TuxCare security update for vm2 (2 CVEs)
TuxCare rebuilt vm2 to address 2 CVEs. Fixed in 3.11.5-tuxcare.7...