1013 matches found
CVE-2026-76496
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
EUVD-2026-107357
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...
CVE-2026-76496
The Cisco Expressway Series software is affected by vulnerabilities involving improper link resolutions , categorized under CWE-59 . These issues were identified during an internal security review and are addressed in the October 2026 software hardening releases . The vulnerabilities have a High ...
CVE-2026-70165
A flaw was found in .NET. An authorized local attacker could exploit this vulnerability to achieve privilege escalation on the host system. The issue is caused by improper link resolution before file access, where the application fails to properly validate file links. By manipulating these links,...
CVE-2026-109596
A flaw was found in Hugo. An improper link resolution vulnerability allows an attacker who controls a malicious theme or module to disclose sensitive files outside the intended project root. By placing a symbolic link a pointer referencing another file location or filesystem junction within a...
Holistic-Deconstruction-of-CVE-2019-5736-
= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...
CVE-2026-109965
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
CVE-2026-109965
Serena versions before 2.0.0 are vulnerable to an improper link resolution vulnerability (CWE-59). The root cause is that Project.is_path_in_project() normalizes paths lexically without resolving symlinks. This allows an attacker to commit symlinks inside a repository to access, read, or overwrit...
CVE-2026-109965
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
CVE-2026-109965 Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...
EUVD-2026-98159
Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...
CVE-2026-62687: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...
CVE-2026-109965: Improper Link Resolution Before File Access
Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.ispathinproject normalizes paths lexically without resolving symlinks, so file tools like readfile and...
CVE-2026-97790: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
DEBIAN-CVE-2026-109596
Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...
CVE-2026-109596
Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...
UBUNTU-CVE-2026-109596
Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...