Browse / Bypasses / Sandboxes and execution limits

Getting past sandboxes and execution limits

Iframe sandboxes, restricted interpreters, jails and disabled functions. 16 disclosed reports got past one.

1. Docker Registry HTTP API v2 exposed in HTTP without authentication leads to docker images dumping and poisoningImproper Access Control - Generic · critical · Semmle
   83 votes
2. Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Code Injection · Fastify
   66 votes
3. [Bypass] Ability to invite a new member in sandbox Organization Business Logic Errors · medium · HackerOne
   35 votes
4. Stored credentials instantly autofilled within sandboxed iframesInformation Disclosure · low · Kaspersky
   23 votes
5. OpenSSH: Memory corruption in AES-GCM supportMemory Corruption - Generic · Internet Bug Bounty
   23 votes
6. Attacker may be able to bounce enough emails which suspend HackerOne's SES service and cause a DoS of HackerOne's email serviceUncontrolled Resource Consumption · medium · HackerOne
   18 votes
7. efree() on uninitialized Heap data in imagescale leads to use-after-freeUse After Free · critical · Internet Bug Bounty
   $1,50016 votes
8. Angular injection in the profile name of onpatientCross-site Scripting (XSS) - Generic · drchrono
   14 votes
9. Internet-based attacker can run Flash apps in local sandboxes by using special URL schemes (PSIRT-3299, CVE-2015-3079)Information Disclosure · Internet Bug Bounty
   $2,00011 votes
10. inconsistently Rejection Logic in file:// URLs with AuthorityPath Traversal · low · curl
    7 votes
11. [notevil] - Sandbox Escape Lead to RCE on Node.js and XSS in the BrowserCode Injection · high · Node.js third-party modules
    6 votes
12. Flash local-with-fileaccess Sandbox BypassInformation Disclosure · Internet Bug Bounty
    6 votes
13. Bypass of the installation sandbox by injecting keystrokes with TIOCSTIImproper Access Control - Generic · low · Homebrew
    5 votes
14. Flash Local Sandbox BypassInformation Disclosure · Internet Bug Bounty
    5 votes
15. Flash Sandbox BypassInformation Disclosure · Internet Bug Bounty
    5 votes
16. imagecolormatch Out Of Bounds Write on Heap Memory Corruption - Generic · high · Internet Bug Bounty
    $1,5004 votes