CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC 在 Flawfinder 2.0.19 版本中，解析可能恶意的文件名时未进行文件名清理。已知受影响的终端基于 libvte，以下示例展示了一个 mate-terminal。 此漏洞已于 2026年5月17日 由 David Wheeler 和我在 2.0.20 版本中修复。 本仓库包含一个示例 POC bash 脚本以及关于该漏洞工作原理的一些信息。 漏洞利用演练 在示例目录中，可以包含任意数量的文件，如下所示： 这些文件都包含相同的 C 代码： root@kitploit: include void fchar s char...

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

POC-CVE-2026-19679

CVE-2026-19679 — अपलोड किए गए फ़ाइलनामों की अपर्याप्त सैनिटाइज़ेशन इनपुट सत्यापन स्थिति: पुष्टि एक 6.7.2-14.el9 लैब पर 2026-08-20। POST /rest/auditFile tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" के साथ HTTP 200 लौटाया और AuditFile 1000002 पंजीकृत किया — शेल-मेटाकैरेक्टर फ़ाइलनाम...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS-Befehlseinschleusung PoC English version Zusammenfassung Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-35585 , die in File Browser Version 2.0.0 bis 2.33.1 entdeckt wurde. Die Schwachstelle...

CVE-2023-38831-POC

Descrizione Nome : CVE-2023-38831 Punteggio CVSS : 7.8 Versioni interessate : Winrar 6.23 CVE-2023-38831 è una vulnerabilità zero-day che interessa tutte le versioni di WinRAR precedenti alla 6.23. Il problema risiede nell'elaborazione del formato ZIP, che potrebbe consentire agli aggressori di...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

UBUNTU-CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a f...

Linux Distros Unpatched Vulnerability : CVE-2026-65612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted...

CVE-2026-44829

Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier are vulnerable to a path traversal in zip entry names. The root cause is that filepath.Base on Linux does not treat backslashes as path separators, so Windows-style parent directory components (e.g., ..\..\Windows\System32...

CVE-2026-65612 Shell Command Injection in nnn

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

EUVD-2026-62401

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

EUVD-2026-58741

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-19679

Affects Security Center; CVE-2026-19679 is described as an input validation issue in the file-upload handling where insufficient sanitization of filenames could contribute to a downstream command injection. Tenable’s advisory for Security Center version 6.9.0 notes fixes that upgrade core compone...

CVE-2026-59921

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without...

CVE-2026-59921 Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without...

EUVD-2026-46397

The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability...

CVE-2026-64881

The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability...