1164 matches found
CVE-2026-41900-POC
OpenLearnX-RCE Exécution de code à distance RCE non authentifiée sur OpenLearnX via montage de volume conteneurisé Découverte par diff → Correctif silencieux → Évasion de sandbox → Divulgation complète de /tmp...
CVE-2026-48907
CVE-2026-48907 PoC éducatif ⚠️ Ce dépôt est destiné uniquement à des fins éducatives et de sécurité défensive. Testez uniquement sur des systèmes que vous possédez ou pour lesquels vous avez une autorisation explicite. N'utilisez pas ce projet contre des systèmes tiers. Ce PoC démontre la...
cve-2022-21658
CVE-2022-21658 poc 请确保使用 Rust 1.58.0 版本 。 首先运行： root@kitploit: while :; do mkdir /tmp/legit; rm -r /tmp/legit; ln -s /tmp/sensitive /tmp/legit; done 然后： root@kitploit: cargo run...
ChromeSHELFLoader
Chrome SHELF Loader Um exploit para CVE-2020-6418 implementando um SHELF Loader. Publicado como parte de Tmp.0ut volume 2...
CVE-2026-75038
CVE-2026-75038 is a local denial-of-service vulnerability in LACT (ilya-zlobintsev/LACT), affecting versions through 0.10.0 . The root cause is a predictable temporary file created in /tmp , which an attacker can exploit via a UNIX symbolic link (symlink) following attack. The CVSS 3.1 score is 6...
CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT
UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...
CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT
UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...
Langflow < 1.9.0 - Remote Code Execution
Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...
CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp
CVE-2026-21002 – Anmeldedatenleck beim Serverless-Kaltstart über wiederverwendetes /tmp Programmcode Python-AWS-Lambda-Simulation root@kitploit: lambdafuncsim.py - Simulated serverless function import os, tempfile, time SECRETFILE = '/tmp/credentials' reused across warm starts def handlerevent: O...
tmp: path Traversal via unsanitized prefix/postfix enables directory escape
A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...
tmp: path Traversal via unsanitized prefix/postfix enables directory escape
A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...
ROOT-APP-NPM-CVE-2026-44705 CVE-2026-44705 in tmp - Patched by Root
Root has patched CVE-2026-44705 in the tmp package for Root:npm. Multiple fixed versions available...
tmp: path Traversal via unsanitized prefix/postfix enables directory escape
A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...
google-osconfig-privesc
Zusammenfassung Der googleosconfigagent-Prozess ist ein Bestandteil der GoogleCloudPlatform-Toolings https://github.com/GoogleCloudPlatform/osconfig und läuft standardmäßig auf jeder VM. Der Agent läuft als root und ist für einige benutzergesteuerte Dienste verantwortlich, einschließlich OS confi...
CVE-2026-55086 Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...
NPM: ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
NPM: epetherpad-lite: Import/export uses Math.random for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 3.0.0...
UBUNTU-CVE-2026-73584
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the /tmp directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. Th...
CVE-2025-15682
CVE-2025-15682 affects TBEA TLogger v2.1.0.0B0.0.0.0. The web server is vulnerable to an unauthenticated resource-exhaustion condition: a remote attacker can send PUT requests to the /tmp/ endpoint, causing the server to create persistent files under /opt/myapp/webserver/ with attacker-controlled...
TencentOS Server 4: python-urwid (TSSA-2026:0729)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0729 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Linux Distros Unpatched Vulnerability : CVE-2026-15791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete...