Critical sandbox escape flaw discovered in popular vm2 NodeJS library

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

BleepingComputer

The #Sega #Dreamcast #VMUPro just went live for pre-orders on #8BitMods website.

I secured a smoke black one.

It ships in October and with 8 day Royal Mail came to $97.00 here in the states.

This thing seems so cool and its features appeal to me more than the #VM2 that was released by Dreamware.

#Gaming #VideoGames #RetroGaming

Finally got around to swapping the buttons on my VM2 with the ones from my original SEGA VMU. They really feel so much nicer, and I prefer the color of the original buttons too.

#SEGA #Dreamcast #RetroGaming #VMU #VM2 #SkiesOfArcadia #PintasQuest #Gaming

Lets Goooooooooooo!

Almost a year and a half ago (!!!!) I ordered the #VM2, a next generation #VMU for the #Sega #Dreamcast!

The device, made by Dreamware Enterprises, has finally made its way to my doorstep!

Unfortunately this afternoon is completely booked. ๐Ÿ˜”

Hopefully I'll get some time to tinker around with it later tonight.

#Gaming #VideoGames #Games #RetroGaming #RetroGames

Chao Adventure is a lot more fun when you don't have to worry about replacing the batteries

#SEGA #Dreamcast #RetroGaming #gaming #Dreamware #VM2 #SonicAdventure #ChaoAdventure

@SuperSelena64 Been waiting on the #VM2 for so long...

I should be included in the next shipment or two. I can't wait!

The wait is agonizing!

Another batch of the #VM2 have shipped out.

I was really hoping that I would have mine by Christmas but at this rate it like it will be February or March.

My order number is 17xx and other than the first shipment they are steadily shipping only 200-ish a month.

The anticipation is brutal but I just need to be patient. Mine will ship eventually.

#VMU #Sega #Dreamcast #RetroGaming #VideoGames

The VM2 has begun to ship!!!

Orders 1 - 461 are currently shipping. I'm 1,7XX...

They are continuously shipping through the month. Hopefully I will have mine in the next few weeks.

#Sega #Dreamcast #SegaDreamcast #VM2 #Gaming #VideoGames #Games #RetroGaming #RetroGames

๐Ÿšจโ€‹ [#PatchNow] New VM2 #SandboxEscape... Two critical vulns are out in the #VM2 #Sandbox Library. These flaws affect all versions prior to 3.9.17 and both carry a CVSS score of 9.8.

If exploited, a threat actor could escape protection boundaries and execute arbitrary code. A patch has been released. so get it and update: https://www.bleepingcomputer.com/news/security/new-sandbox-escape-poc-exploit-available-for-vm2-library-patch-now.

These two CVEs (CVE-2023-29199 and CVE-2023-30547) were discovered by Seung Hyun Lee.

https://nvd.nist.gov/vuln/detail/CVE-2023-29199

https://nvd.nist.gov/vuln/detail/CVE-2023-30547

#infosec #patchmanagement #riskmitigation

New sandbox escape PoC exploit available for VM2 library, patch now

Security researchers have released yet another sandbox escape proof of concept (PoC) exploit that makes it possible to execute unsafe code on the host running the VM2 sandbox.

BleepingComputer
๐Ÿšจ #vm2 JavaScript library users, update now! Critical flaws (CVE-2023-29199 & CVE-2023-30547) could lead to remote code execution. Patch available in versions 3.9.16 & 3.9.17. Protect against sandbox bypass! More info: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html #Cybersecurity #RCE
Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox

The Hacker News