65409 matches found
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
CVE-2026-12357
creationtimestamp| type| source ---|---|--- 2026-07-29 22:08:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswspnm622j...
CVE-2026-67437
creationtimestamp| type| source ---|---|--- 2026-07-29 22:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrswdykg4k2w 2026-07-30 16:35:35+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xpxj-f2fm-rqch 2026-07-31...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the Link.filename path handling in pip.internal.models.link and the download path joins in pip.internal.network.download and pip.internal.req.reqinstall. An attacker can place files at arbitrary locations on disk...
CVE-2026-15157
creationtimestamp| type| source ---|---|--- 2026-07-29 21:20:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c 2026-08-04 11:32:23+00:00| seen| https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f 2026-08-04 12:00:59+00:00| seen|...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
CVE-2026-14643
creationtimestamp| type| source ---|---|--- 2026-07-29 21:11:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrstmoc6mc2c 2026-08-04 12:31:53+00:00| seen| https://gist.github.com/alon710/dbd628dcf4d2ee2986aea22ad7d6f2b4...
CVE-2026-6336
creationtimestamp| type| source ---|---|--- 2026-07-29 21:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrst3p5lsr2e 2026-07-30 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...
GHSA-FQ3F-M5QM-99F5
creationtimestamp| type| source ---|---|--- 2026-07-29 20:31:26+00:00| seen| https://gist.github.com/alon710/e40fc20ed683aaeeae74fc5b1a713445...
CVE-2026-13268
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2023-21123
creationtimestamp| type| source ---|---|--- 2026-07-29 20:11:56+00:00| seen| https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e...
CVE-2026-51244
creationtimestamp| type| source ---|---|--- 2026-07-29 20:02:20+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrsprhjqnh2p...
EUVD-2026-50490
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2026-13268
The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...
CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature
The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...
CVE-2026-54727
creationtimestamp| type| source ---|---|--- 2026-07-29 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b 2026-07-29 18:35:08+00:00| published-proof-of-concept| https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f 2026-07-30 00:32:17+00:0...