zipdefrag

This Dump Is A Puzzle or Advanced Shotgun Parsing for Fools and Rebels il était une fois Once upon a time, dear reader, on a dark and stormy night, your faithful author stumbled upon a perplexing and mysterious situation - a system where the only thing preventing chip off memory analysis and...

CVE-2026-105037

EnergizeLab station-middleware (NestJS) Docker images, specifically versions 1.6.5 through 1.8.2 , are vulnerable to an authenticated path traversal vulnerability. A registered, low-privilege account can read arbitrary files from the server by providing an attacker-controlled file path. This flaw...

CVE-2026-105032 EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write

The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper...

MAL-2026-17889 Malicious code in proxyrobika (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca9520dcc3936b679b577bee42392ecb6ee65cd658c4858d325de5c738a7a200 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MS15-011-Files

MS15-011-Files Repo that the MS15-011 exploit clones to get required files. Avoids having to download all files from exploitdev...

astrolock

Astrolock A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files...

EUVD-2026-97908

Nginx UI: MCP nginxconfigadd Bypasses Directive Validation — Authenticated RCE...

Nginx UI: Auto backup name allows path traversal outside validated storage path

Summary Nginx UI validates backuppath and storagepath against the administrator-defined backup.GrantedAccessPath boundary, but the final auto-backup output filename is built from the user-controlled auto-backup name without stripping path separators or .. components. An authenticated user who can...

GHSA-GFP8-W835-V44J borg extract might modify out-of-tree files when extracting maliciously crafted archives

Impact A maliciously crafted archive could contain a symlink e.g. "evil" - "/etc" followed by an item below it "evil/passwd", or an item whose path embeds ".." e.g. "a/../../etc/passwd". When extracting such items, borg followed the symlink / resolved the "..", so it could delete or overwrite fil...

CVE-2026-83991-writeup-and-poc

CVE-2026-83991: superseding a file that the caller cannot delete I kept these lines next to each other because separating them makes the bug look more complicated than it is: CreateFileW, GENERICWRITE error 5 DeleteFileW error 5 CfCreatePlaceholders, SUPERSEDE SOK per-entry Result SOK The write...

CVE-2026-41940---cPanel-WHM-check

IOC Check Sessions Files Overview iocchecksessionsfiles.sh is a cPanel-provided detection script referenced in the official cPanel security advisory: Security: CVE-2026-41940 - cPanel & WHM / WP2 Security Update 04/28/2026 The script is used to scan cPanel/WHM session files for suspicious...

CVE-2026-111161

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...

CVE-2026-111139

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...

CVE-2026-111170 kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name

kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validatesubpath strips leading slashes while pathlib's join discards the base path...

CVE-2026-111170

The kedro-datasets library (versions 9.3.0 through 9.6.0) is vulnerable to a path traversal vulnerability within the MatplotlibDataset.save() function. An attacker can supply absolute plot names to write files outside the intended dataset directory. The root cause occurs because validate_sub_path...

CVE-2026-111161 libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...

EUVD-2026-102288

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...

CVE-2026-111161

The libADLMIDI library, versions 1.6.2 through 1.6.2.1 , is vulnerable to an off-by-one stack out-of-bounds write within the BW_MidiSequencer component. An attacker can corrupt stack memory by providing a crafted MIDI file containing a note-on message with status 0x9F and note 0x7F . The vulnerab...

EUVD-2026-102280

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...

CVE-2026-111153 Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...