Vulnerability (CVE)
A critical sandbox escape vulnerability in the vm2 Node.js library, tracked as CVE-2026-22709 with a CVSS score of 9.8 out of 10.0, lets attackers bypass Promise.prototype.then and Promise.prototype.catch callback sanitization in version 3.10.0 to escape...
Google disrupted the IPIDEA residential proxy network, seizing or sinkholing command-and-control domains and reducing its available device pool by millions. The network turned enrolled devices into proxy exit nodes, sold access to customers, and has been...
A dozen critical vulnerabilities were disclosed in the vm2 Node.js sandbox library, each allowing sandbox escape and arbitrary code execution on the host system. The flaws were reported by researchers including "XmiliaH" (five CVEs), "c0rydoras" (two), and...