Oracle VM VirtualBox – VM Escape via VGA Device (github.com)

Screenshot of github.com: Oracle VM VirtualBox – VM Escape via VGA Device

First screen, captured 1 year ago.

Looks similar

Screenshot of github.com: AMD: Microcode Signature Verification Vulnerability

AMD: Microcode Signature Verification Vulnerability (github.com)

271 points by todsacerdoti 1 year ago | 102 comments

Screenshot of github.com: DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware (github.com)

367 points by tosh 1 year ago | 263 comments

GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.

duckdb npm supply-chain-attack malware

Screenshot of github.com: RCE Vulnerability in React and Next.js

RCE Vulnerability in React and Next.js (github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

nextjs react-server-components rce vulnerability