A now-patched security flaw in the vm2 JavaScript sandbox module could be abused by a remote adversary to break out of security barriers and perform arbitrary operations on the underlying machine.
“A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox,” GitHub said in an advisory published on September 28, 2022.
The
Related Post
- December 25, 2024
Ruijie Networks’ Cloud Platform Flaws Could Expose 50,000
Cybersecurity researchers have discovered several security flaws in the cloud management platform developed by Ruijie Networks that could permit an
- December 25, 2024
Critical SQL Injection Vulnerability in Apache Traffic Control
The Apache Software Foundation (ASF) has shipped security updates to address a critical security flaw in Traffic Control that, if
- December 25, 2024
Iran’s Charming Kitten Deploys BellaCPP: A New C++
The Iranian nation-state hacking group known as Charming Kitten has been observed deploying a C++ variant of a known malware
- December 24, 2024
The AI Fix #30: ChatGPT reveals the devastating
In episode 30 of The AI Fix, AIs are caught lying to avoid being turned off, Apple’s AI flubs a