vm2 crypto builtin loads attacker native code through setEngine
CVE-2026-92939
Summary vm2 3.11.6 exposes the host `crypto` module to a `NodeVM` when that single builtin is allowed. The module is pr
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
CVE-2026-92944
## Reporter - Name or handle: `[YMsora]` - Report date: 2026-08-14 ## Summary The latest published vm2 release, **3.1
vm2 NodeVM can replace the host process TLS trust store
CVE-2026-92941
Summary vm2 3.11.6 exposes the host `tls` module to a `NodeVM` when that builtin is explicitly allowed. Although the mo
AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions...
CVE-2026-103056
AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStr
A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration...
CVE-2026-86131
A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attack
LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler...
CVE-2026-103040
LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with -
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with...
CVE-2026-103041
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization e
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables...
CVE-2026-71379
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an...
CVE-2026-70356
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and exe
@xhmikosr/decompress: Path traversal via symlink chain
CVE-2026-101894
### Impact When extracting an untrusted archive with the default `decompress(input, output)` API, a crafted archive con
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
CVE-2026-102268
**Prerequisites** (both conditions must hold; both are deployment properties, not attacker-controlled at request time):
A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of...
CVE-2026-102240
A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/n
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd...
CVE-2026-102361
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unaut
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing...
CVE-2026-102334
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers t
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 -...
CVE-2026-101110
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) quote() instead of rejecting it.
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8...
CVE-2026-101108
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6...
CVE-2026-100752
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatem
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...
CVE-2026-100886
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element
Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the...
CVE-2026-101090
Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint,...
CVE-2026-101084
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticat