LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

Summary An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertexaicredentials value to /utils/transformrequest. The request-body safety blocklist rejected vertexcredentials but missed its alias vertexaicredentials, which let the value...

GHSA-G5FF-637F-6Q2M LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

Summary An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertexaicredentials value to /utils/transformrequest. The request-body safety blocklist rejected vertexcredentials but missed its alias vertexaicredentials, which let the value...

GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

A note on the referenced files. This report was submitted through GitHub's private vulnerability reporting API, which carries no attachments. Every transcript this report leans on is reproduced inline above, verbatim. The file names it mentions poc.sh, poc.log, per-case transcripts, evidence.md,...

GHSA-23MF-XHV8-69C2 GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)

A note on the referenced files. This report was submitted through GitHub's private vulnerability reporting API, which carries no attachments. Every transcript this report leans on is reproduced inline above, verbatim. The file names it mentions poc.sh, poc.log, per-case transcripts, evidence.md,...

GHSA-GQ48-PQFC-9P58 GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree

Summary GitPython's public Submodule.move API verifies that its destination is lexically inside the parent repository, but it does not reject symbolic links in the destination's intermediate components before filesystem operations. On systems that check out Git symlinks, an untrusted repository c...

EUVD-2026-111079

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

CVE-2026-111583 Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

CVE-2026-111583

The TeamViewer Full Client and Host for Windows prior to version 15.82 is vulnerable to Local Privilege Escalation (CWE-269) due to improper access control in the installer staging directory. During the installation of Advanced Asset Management , a local authenticated user with low privileges can...

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

Summary WekaClassifier in NLTK passes a caller-controlled model file path to the weka Java VM without any nltk.pathsec validation. WekaClassifier.train puts the caller's modelfilename verbatim into the weka argv "-d", modelfilename, ... weka writes the trained model there, and...

GHSA-J456-XH4H-CPF2 NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

Summary WekaClassifier in NLTK passes a caller-controlled model file path to the weka Java VM without any nltk.pathsec validation. WekaClassifier.train puts the caller's modelfilename verbatim into the weka argv "-d", modelfilename, ... weka writes the trained model there, and...

GHSA-QR6X-7V33-6QMG Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

The public /api/remove endpoint uses attacker-controlled extras.sammodel in both SAM filenames and GitHub download URLs. Path traversal plus a URL fragment lets an unauthenticated attacker place malicious ONNX models beside a target file. The models read the file as ONNX external data and encode...

Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

The public /api/remove endpoint uses attacker-controlled extras.sammodel in both SAM filenames and GitHub download URLs. Path traversal plus a URL fragment lets an unauthenticated attacker place malicious ONNX models beside a target file. The models read the file as ONNX external data and encode...

EUVD-2026-64268

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files...

GHSA-C8R8-95HG-MP34 SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

Summary kernel/mcp/tools/file.go's resolvePath includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist refuseToAccess in kernel/api/file.go, following the remediation for GHSA-cvhv-7xhj-xjp8 "Unauthenticated Administrator...

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

Summary kernel/mcp/tools/file.go's resolvePath includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist refuseToAccess in kernel/api/file.go, following the remediation for GHSA-cvhv-7xhj-xjp8 "Unauthenticated Administrator...

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

EUVD-2026-108261

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content...

GHSA-RW7V-4HRQ-X6R9 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

LFITester

DISCLAIMER • This tool is for educational purposes only. • The developers and collaborators are not responsible for any illegal usage of this tool. LFITester LFITester is a Python3 tool which tests if a server is vulnerable to Local File Inclusion LFI attacks. It runs in Linux/Unix systems but it...

packer-KitsuPE

KitsuPE In this repository, you'll find some sort of playground I use for my PE portable executable file modification stuff. The code should be compiled using LLVM for Windows because I replace/redefine some intrinsic functions i.e. memset for substituting usage of the regular Win32 CRT. shellcod...