Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment.
The vulnerability (“GHSA-864f-rcv7-6rh4”), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.
Source: The Hacker News
How Trail of Bits helps verify the integrity of Signal chats Source: Hacker News
Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 400 requests (recent log) 64.227.190.95 — 122 requests (recent log) 216.244.66.232 — 118 requests (recent