CVE-2026-34990-CUPS-LPE-PoC

CVE-2026-34990 | CUPS Local Privilege Escalation PoC A generic proof-of-concept for CVE-2026-34990 , a local privilege escalation vulnerability affecting CUPS 2.4.16. The exploit demonstrates how a local unprivileged user can abuse CUPS local authentication and printer configuration behavior to...

cups-2.4.16-lpe

CUPS 2.4.16 — Local Privilege Escalation CVE-2026-34990 📋 Summary CUPS 2.4.16 contains a local privilege escalation vulnerability also tracked as GHSA-c54j-2vqw-wpwp. The Vulnerability 1. World-writable socket — /run/cups/cups.sock is world-writable, allowing any local user to send IPP requests t...

CVE-2026-34990-poc

CVE-2026-34990 CUPS 2.4.16 local privilege escalation via arbitrary file write through CUPSCREATELOCALPRINTER. Vulnerability CUPS allows creating local printers with a device-uri set to a file:// path. Submitting a print job with document-format: application/vnd.cups-raw and compression: gzip...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

FortiLPE

Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...

CVE-2025-11001---7-Zip

CVE-2025-11001 - 7-Zip High-severity symlink traversal in 7-Zip allowing arbitrary file write / RCE Patched in 7-Zip 25.00 July 2025 – Public exploit available FOR AUTHORIZED SECURITY TESTING AND RESEARCH ONLY -critical Vulnerability Summary CVE : CVE-2025-11001 CVSS v3.1 : 7.0 High –...

CVE-2026-63120

The pghoard PostgreSQL backup daemon and restore tool is vulnerable to an incomplete path traversal fix in restore.py prior to version 2.7.2 . An attacker with write access to the cloud object storage (e.g., S3, GCS, or Azure) can create a maliciously crafted delta backup manifest containing path...

CVE-2026-63120 PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage such as S3, GCS, or Azure to execute arbitrary file write...

RLSA-2026:88262 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

buildah security update

An update is available for buildah. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...

CVE-2024-54910

CVE-2024-54910 https://vulners.com/cve/CVE-2024-54910 This document explores a vulnerability that allows arbitrary file writes, leading to privilege escalation on a Windows System that has Hasleo Backup Suite Free = 4.9.4 installed. It demonstrates how backup recovery operations, combined with...

Exploit for CVE-2026-110264

GitLab2Safe-Defensive-Checker !Pythonhttps://img.shields.i...

CVE-2026-57113 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/[email protected]. The resolver stores the user-controlled template path and ref verbatim, and the cache layer late...

CVE-2026-57113

PraisonAI versions 2.6.0 through 4.6.57 are vulnerable to a path traversal flaw in the template loader. The system accepts GitHub template URIs with refs but stores the user-controlled path and ref verbatim without normalization. Because the cache layer joins these values into a filesystem path w...

CVE-2026-112904

The Vvveb CMS (versions 1.0.8.6 and prior) contains a Path Traversal vulnerability in the nextRestore() and nextBackup() functions of the backup controller. The root cause is the direct concatenation of a file GET parameter to DIR_BACKUP without utilizing the sanitizeFileName() function. This all...

pfsense-dyndns-cache-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-dyndns-cache-path pfsense-dyndns-cache-path Class: File write Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Custom host skips isdomain. updatedns builds the cache path as /conf/dyndnsiftype...

CVE-2022-39952

CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet FortiNAC The default configuration of this exploit writes a cron job to create a reverse shell. Be sure to change the payload file to suite your environment. Technical Analysis A technical root cause analysis of the vulnerability and...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

CVE-2026-39973-PoC

CVE-2026-39973-PoC This is a small C apk file builder for CVE-2026-39973. Credits OnlyToxi - Helping with the path will be helping further & emotional support. iBotPeaches/Apktool - Documentation & parsing. Disclaimer This is a proof of concept , which is made for educational purposes only! AI...