CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...

CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp container-to-host arbitrary file write HackSpeak distribution mirror. This repository is a distribution mirror of the CopyEscape PoC CVE-2026-17106 published by the Imperva Red Team Ron Masas , with the code identical to upstream; upstream does not include a...

two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download Handler Proof-of-concept for CVE-2026-18907 CVSS 7.5 High, CWE-23, a relative path-traversal vulnerability in the download file feature of TECNO Hi Browser com.talpa.hibrowser version 2.23.1.1. The browser trusted an attacker-controlled...

DEBIAN-CVE-2026-114583

tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall with filter="tar" to write files...

CVE-2026-115424 Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

CVE-2026-115424

A flaw in the OpenShift client (oc) allows for a symlink/hardlink target validation bypass during the oc image extract operation. The application fails to properly sanitize links pointing to absolute paths or sibling directories, enabling an attacker providing a malicious container image to write...

CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

CVE-2026-18953

CVE-2026-18953 — PoC Arbitrary file write in awslabs.aws-transform-mcp-server AWS Transform MCP server via the savePath parameter of the getresource tool. | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — Improper Limitation of a Pathname to a Restricted Directory Affected|...

CVE-2026-114583

tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall with filter="tar" to write files...

EUVD-2026-108512

tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall with filter="tar" to write files...

CVE-2025-8110

CVE-2025-8110 – Gogs ≤ 0.13.3 RCE PoC Proof-of-Concept for CVE-2025-8110 , an authenticated arbitrary file write in Gogs ≤ 0.13.3 caused by improper symbolic-link handling in the PutContents API. An authenticated user can commit a symlink pointing to .git/config, then use the API to overwrite it...

CVE-2026-23009-DICOM-Network-Image-Injection-Without-Authentication

CVE-2026-23009 – DICOM Network Image Injection Without Authentication Program Code Python pydicom dicomserversim.py - DICOM C-STORE SCP with no AE title check from pynetdicom import AE, evt, AllStoragePresentationContexts def handlestoreevent: ds = event.dataset No authentication, accepts any ima...

CVE-2026-44024_exploit

CVE-2026-44024 — Fluentd outfile $tag Path-Traversal Arbitrary File Write Unauthenticated arbitrary file write in Fluentd's outfile plugin via the $tag placeholder. outfile lets operators template the output path with a $tag placeholder e.g. path /var/log/fluent/$tag. Outputextractplaceholders...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA Arbitrary File Write 👨‍💻 Author Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2021-41579 - Arbitrary file write via malicious .els project file in LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Vulnerability Description CVE-2021-41579 is a client-side...

POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal Vulnerability 📝 Description PoC for CVE-2025-69194 , a critical Path Traversal vulnerability in GNU Wget2 = 2.2.0 verified on v1.99.1. This vulnerability allows attackers to achieve arbitrary file write or overwrite on the victim's filesystem by providing ...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX Bypass PoC Author: d3vn0mi / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Overview A proof-of-concept exploit...

CVE-2026-92709

A flaw was found in rsyslog. This path traversal vulnerability allows a remote attacker to write log files outside the intended logging directory. When dynamic file generation dynaFile templates incorporate untrusted input without proper path validation, crafted log messages can escape the...

CVE-2026-79885

An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service...

DEBIAN-CVE-2026-115378

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entrie...