X

Vous n'êtes pas connecté

Maroc Maroc - BLEEPINGCOMPUTER.COM - A La Une - 28/Jan 17:46

New sandbox escape flaw exposes n8n instances to RCE attacks

Two vulnerabilities in the n8n workflow automation platform could allow attackers to fully compromise affected instances, access sensitive data, and execute arbitrary code on the underlying host. [...]

Articles similaires

Sorry! Image not available at this time

New sandbox escape flaw exposes n8n instances to RCE attacks

bleepingcomputer.com - 28/Jan 17:46

Two vulnerabilities in the n8n workflow automation platform could allow attackers to fully compromise affected instances, access sensitive data, and...

Sorry! Image not available at this time

Critical sandbox escape flaw found in popular vm2 NodeJS library

bleepingcomputer.com - 27/Jan 16:35

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary...

Sorry! Image not available at this time

Critical sandbox escape flaw found in popular vm2 NodeJS library

bleepingcomputer.com - 27/Jan 16:35

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary...

Sorry! Image not available at this time

Dissecting CVE-2026-22709: The Zombie Exploit in Node.js vm2

thecyberthrone.in - 29/Jan 01:36

CVE-2026-22709 represents a critical sandbox escape vulnerability in the widely used vm2 Node.js library, allowing attackers to achieve remote code...

Sorry! Image not available at this time

Cisco Unified Communications 0-day RCE Vulnerability Exploited in the Wild to Gain Root Access

itsecuritynews.info - 22/Jan 04:15

Cisco has disclosed a critical zero-day remote code execution (RCE) vulnerability, CVE-2026-20045, actively exploited in the wild. Affecting key...

Sorry! Image not available at this time

Cisco Unified Communications 0-day RCE Vulnerability Exploited in the Wild to Gain Root Access

itsecuritynews.info - 22/Jan 04:15

Cisco has disclosed a critical zero-day remote code execution (RCE) vulnerability, CVE-2026-20045, actively exploited in the wild. Affecting key...

Sorry! Image not available at this time

Cisco fixed actively exploited Unified Communications zero day

securityaffairs.co - 21/Jan 23:47

Cisco patched a critical zero-day RCE flaw (CVE-2026-20045) in Unified Communications and Webex Calling that is actively exploited in the wild. Cisco...

Sorry! Image not available at this time

Critical AVEVA Software Flaws Allow Remote Code Execution With SYSTEM Privileges

itsecuritynews.info - 20/Jan 05:32

AVEVA has disclosed seven critical and high-severity vulnerabilities in its Process Optimization software (formerly ROMeo) that could enable attackers...

Sorry! Image not available at this time

Critical AVEVA Software Flaws Allow Remote Code Execution With SYSTEM Privileges

itsecuritynews.info - 20/Jan 05:32

AVEVA has disclosed seven critical and high-severity vulnerabilities in its Process Optimization software (formerly ROMeo) that could enable attackers...

Sorry! Image not available at this time

Rockwell Automation Verve Asset Manager

itsecuritynews.info - 20/Jan 17:38

View CSAF Summary Successful exploitation of these vulnerabilities may allow an attacker to access sensitive information stored in variables within...