1779 matches found
CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
CVE-2024-37726 MSI Center 로컬 권한 상승 - 임의 파일 덮어쓰기 취약점...
security-research
Investigación de Seguridad Una colección de archivos relacionados con mi investigación personal de seguridad. Contenido adicional se publicará en mi blog https://blog.mirch.io. Herramientas Herramienta| Descripción ---|--- openssldircheck| Utilidad de Windows para comprobar rutas potencialmente...
Cve-2025-8088-WinRar-vulnerability
Cve-2025-8088 WinRAR Python में बना एक उपकरण जो CVE-2025-8088 भेद्यता का शोषण करने के लिए एक दुर्भावनापूर्ण RAR फ़ाइल बनाता है। CVE-2025-8088 भेद्यता WinRAR में हेरफेर की गई RAR फ़ाइलों के माध्यम से path traversal और पीड़ित के सिस्टम पर मनमानी फ़ाइलों को अधिलेखित करने की अनुमति देती है। यह परियोज...
CVE-2019-1476
CVE-2019-1476 AppXSvc DoS par écrasement arbitraire de fichier J'ai signalé indépendamment cette vulnérabilité à MSRC dans le cadre de mes recherches inspirées par CVE-2019-0841 initialement rapportée par Nabeel Ahmed. Cette vulnérabilité permet à un utilisateur normal d'écraser des fichiers...
CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
CVE-2024-37726 MSI Center Escalação de Privilégio Local - Vulnerabilidade de Sobrescrita Arbitrária de Arquivos Resumo da Vulnerabilidade Uma vulnerabilidade de escalação de privilégio local no sistema operacional Windows foi identificada nas versões = 2.0.36.0 do MSI Center, que permite a um...
CVE-2022-43293
Exploits für CVE-2022-43293 Um einen dauerhaften Windows Denial of Service zu erreichen wie im obigen POC gezeigt, führen Sie einfach Exploit.bat aus und geben Sie %windir%\system32\cng.sys ein, wenn Sie gefragt werden, welche Datei Sie überschreiben möchten. Hier finden Sie meinen Bericht zur...
CVE-2026-59682
OpenRGB through 1.0rc3 is affected by an arbitrary file overwrite and deletion vulnerability via the SAVE_PROFILE message, allowing both local and remote exploitation. Per CVSS 3.1, this is rated CRITICAL (9.1) with a network attack vector requiring no privileges and no user interaction , resulti...
EUVD-2026-66380
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
CVE-2026-79655
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding
A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...
gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding
A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...
CVE-2026-77679
A path traversal ZIP slip vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, the decompressxpithread function extracts XPI archives ZIP format to disk using libarchive. For each archive entry, the output path i...
Dirty-Pipe-CVE-2022-0847
Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe ist eine Schwachstelle zum Überschreiben beliebiger Dateien, die eine Privilegienausweitung ermöglicht, indem beliebige schreibgeschützte Dateien wie /etc/passwd, /etc/shadow geändert oder überschrieben werden. Schritte 1. Kompilieren mit gcc...
CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction
adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...
CVE-2026-17171
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links...
CVE-2026-16926
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...
CVE-2026-16926 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...
CVE-2026-70383
CVE-2026-70383 is a path traversal vulnerability in the Estonian Information System Authority (RIA) DigiDoc4 client , affecting versions 4.0.0 through before 4.11.0 . The flaw allows arbitrary file overwrite on the local system, as indicated by the CVELIST title. The CVSS 4.0 base score is 8.4 (H...
CVE-2026-70383 Arbitrary file overwrite vulnerability in DigiDoc4 client
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estonian Information System Authority RIA DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0...
