CVE-2021-3929-3947

CVE-2021-3929-3947 VM escape PoC for CVE-2021-3929 and CVE-2021-3947. Educational purposes only. You can read the white paper for more information. Environment OS: Ubuntu 21.10 Linux: 5.13.0 gcc: 11.2.0 glibc: 2.34 glib: 2.68.4 QEMU: 6.1.0 Guest OS: Ubuntu 21.04 Commands Host qemu-system-x8664 ru...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

NashaVM

NashaVM - Native Sharp Virtual Machine Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI Installation git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Dependencies dnlib .NET Framework Visual C++ Redistrutable FAQ Wha...

vmp2

Introduction This repository is a collection of legacy tools for working with VMProtect 2 -protected binaries. These tools enable unpacking, analysis, and experimental devirtualization of software protected with VMProtect 2. At the core of this collection is vmprofiler , a utility library that...

ThreatPursuit-VM

/ || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT THREAT INTELLIGENCE VM Version 2020.1 [email protected] Created by: Dan Kennedy Jake Barteaux @day1player Blaine Stancill @MalwareMechanic...

EUVD-2026-108542

Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-87322

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-87301

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-110063

Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-110063

The VM Inspector for Azure Virtual Machines is affected by a vulnerability caused by improper link resolution before file access (link following). This flaw allows an unauthorized attacker to achieve elevation of privilege over a network. While the technical root cause is identified as CWE-59 , s...

CVE-2026-98718

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem supporting AMD SEV Secure Encrypted Virtualization. During virtual machine migration on the same host, CPU cache maintenance was performed after deactivating the source guest's encryption state instead of before. Th...

VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-86696

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...

CVE-2026-105270

Allocation of Resources Without Limits or Throttling vulnerability in esamlbinding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via a crafted SAMLResponse. esamlbinding:decoderesponse/2 parses the decoded SAMLResponse with...

CVE-2026-93471 Unbounded SAML message decompression in esaml allows memory exhaustion

Improper Handling of Highly Compressed Data Data Amplification in esamlbinding in dropbox esaml allows an unauthenticated attacker to exhaust server memory and crash the Erlang VM via a crafted compressed SAMLResponse. esamlbinding:decoderesponse/2 base64-decodes the attacker-supplied SAMLRespons...

CVE-2026-93471

The esaml library (version 0.1.0 and onward) is vulnerable to memory exhaustion due to improper handling of highly compressed data in the esaml_binding component. Specifically, the esaml_binding:decode_response/2 function base64-decodes a SAMLResponse and inflates it using zlib:unzip/1 without an...

CVE-2026-86696 Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...

CVE-2026-86696

Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via unsigned LogoutResponse messages. esaml:statuscodemap/1 in src/esaml.erl maps any StatusCode value it does not...

CVE-2026-86696

The esaml library (version 0.1.0 and onward), used in dropbox esaml , is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. An unauthenticated attacker can exhaust the Erlang VM atom table and crash the node by sending unsigned LogoutResponse messages to the sin...

CVE-2026-105270

Allocation of Resources Without Limits or Throttling vulnerability in esamlbinding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the node via a crafted SAMLResponse. esamlbinding:decoderesponse/2 parses the decoded SAMLResponse with...