CVE-2026-93864 Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...

GHSA-3W55-933P-8PV5 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...

Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...

Symlink Attack

Overview strands-agents is an A model-driven approach to building AI agents in just a few lines of code Affected versions of this package are vulnerable to Symlink Attack via FileSessionManager.writefile in filesessionmanager.py, where the temporary file used during atomic writes was written to a...

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

A note on the referenced files. This report was submitted through GitHub's private vulnerability reporting API, which carries no attachments. Every transcript this report leans on is reproduced inline above, verbatim. The file names it mentions poc.sh, poc.log, per-case transcripts, evidence.md,...

GHSA-23MF-XHV8-69C2 GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

A note on the referenced files. This report was submitted through GitHub's private vulnerability reporting API, which carries no attachments. Every transcript this report leans on is reproduced inline above, verbatim. The file names it mentions poc.sh, poc.log, per-case transcripts, evidence.md,...

GHSA-GQ48-PQFC-9P58 GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree

Summary GitPython's public Submodule.move API verifies that its destination is lexically inside the parent repository, but it does not reject symbolic links in the destination's intermediate components before filesystem operations. On systems that check out Git symlinks, an untrusted repository c...

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

Summary WekaClassifier in NLTK passes a caller-controlled model file path to the weka Java VM without any nltk.pathsec validation. WekaClassifier.train puts the caller's modelfilename verbatim into the weka argv "-d", modelfilename, ... weka writes the trained model there, and...

GHSA-J456-XH4H-CPF2 NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

Summary WekaClassifier in NLTK passes a caller-controlled model file path to the weka Java VM without any nltk.pathsec validation. WekaClassifier.train puts the caller's modelfilename verbatim into the weka argv "-d", modelfilename, ... weka writes the trained model there, and...

CVE-2026-12887

In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory...

Exploit for CVE-2026-1306

CVE-2026-1306 — midi-Synth Proof-of-Concept PoC exploit...

ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE — Detect

Fingerprint / reachability check for ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ZesleCP — Authenticated Arbitrary File Write → Cron → Root RCE""" from kittysploit import from lib.protocols.http.httpclient import...

MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE

MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE """MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE""" from future import annotations from kittysploit import import base64 import os import subprocess import sys import tempfile import textwrap...

Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE (storeTo=file: — Detect

Fingerprint / reachability check for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron""" from kittysploit import...

FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem — Detect

Fingerprint / reachability check for FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem !/usr/bin/env python3 -- coding: utf-8 -- """Detection for FME Flow Zip-Slip Arbitrary File Write → Code Execution as LocalSystem""" from kittysploit import from lib.protocols.http.httpclie...

Accusoft / Apryse PrizmDoc for Java (VirtualViewer) 5.22.1 — Unauthenticated `up — Detect

Fingerprint / reachability check for Accusoft / Apryse PrizmDoc for Java VirtualViewer 5.22.1 — Unauthenticated uploadDocument Arbitrary File Write to JSP Webshell to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Accusoft / Apryse PrizmDoc for Java VirtualViewer 5.22.1 —...

TigerGraph Community Edition 4.2.4 — Default Hard-Coded Credentials + GSQL Arbit — Detect

Fingerprint / reachability check for TigerGraph Community Edition 4.2.4 — Default Hard-Coded Credentials + GSQL Arbitrary File Write + Unauthenticated REST++ Trigger → SSH RCE as tigergraph !/usr/bin/env python3 -- coding: utf-8 -- """Detection for TigerGraph Community Edition 4.2.4 — Default...

Xeams SMTP save-body cron root RCE

X-SMSAVEBODY4DEBUGGING writes arbitrary file; base64 body plants /etc/cron.d job running payload as root. """Xeams SMTP X-SMSAVEBODY4DEBUGGING Arbitrary File Write Cron Root RCE""" from future import annotations from kittysploit import import base64 import socket import sys import time import re...

CVE-2026-106087

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure of sensitive information...

RLSA-2026:89761 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...