378 matches found
CVE-2023-38408
OpenSSH 漏洞 - CVE-2023-38408 📚 简介 在 OpenSSH（9.3p2 版本之前）中发现了一个漏洞。OpenSSH 中 ssh-agent 的 PKCS11 功能存在搜索路径不够可信的问题，如果 agent 被转发到攻击者控制的系统（/usr/lib 中的代码加载到 ssh-agent 中并不一定安全），则可能导致远程代码执行。此漏洞允许攻击者控制服务器上转发的 agent 套接字，并能够在客户端主机文件系统上写入，从而以运行 ssh-agent 的用户权限执行任意代码。 在下面的示例中，我们可以简要观察从探索到入侵 alice 用户的步骤。 步骤 1 - 攻击...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2025-33053-Checker-PoC
CVE-2025-33053 漏洞检查器及概念验证（PoC） 检查器验证截图 PoC 验证截图 一套完整的工具，用于检查并演示针对 CVE-2025-33053 的潜在利用——这是一项影响 Windows 系统的严重 WebDAV 远程代码执行（RCE）漏洞。 📌 关于 CVE-2025-33053 CVE-2025-33053 允许攻击者利用引用恶意远程 WebDAV 共享的 .LNK 快捷方式文件，在受影响系统上可能导致远程代码执行（RCE）。 漏洞条件： 目标系统上必须安装并运行 WebClient 服务 。 目标操作系统在访问此类路径（即使通过 .LNK 文件）时，必须能够通过...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2025-24054
Windows 文件资源管理器零点击 NTLMv2-SSP 哈希泄露 🎥 演示 POC + 2025年3月补丁绕过 🎥 补丁绕过 点击上方图片观看漏洞演示 📋 技术概述 本仓库提供了一个全面的研究框架，分析了 Windows Shell 文件格式处理中导致 NTLMv2-SSP 凭据泄露的漏洞链。该工具包实现了两种不同的攻击向量，利用 Windows 资源管理器在文件预览操作期间自动解析 UNC 路径的特性。 核心漏洞机制 根本安全问题在于 Windows Shell 在预览操作期间自动处理特定文件格式中嵌入的 UNC 路径。当用户打开包含特制文件的 ZIP 存档时，Windows...
CVE-2025-55182
CVE-2025-55182 RCE 自用检查工具，用于检查CVE-2025-55182漏洞 漏洞原理 React Server Components 在解码发送至服务器函数端点的 payload 时，存在路径解析缺陷。其通过冒号分隔对象属性实现嵌套取值（如$1🅰️b对应"a":"b":"foo".a.b），但未对属性存在性做校验。当传入$1🅰️a时，会触发.a.a的无效取值，导致服务端 500 错误；而攻击者可通过构造特殊 payload，利用原型链污染和代码注入，实现 RCE。 目录说明 exp.py 漏洞利用代码（一键getshell） cve-2025-55182-check.sh...
CVE-2026-32202
Autenticación forzada sin clic: visualizar una carpeta con el .lnk manipulado desencadena la resolución UNC durante el renderizado del icono, forzando a la víctima a realizar una conexión saliente dirigida por el atacante que filtra y permite el relay de sus credenciales Net-NTLMv2. Surgió debido...
cve-2024-32002-poc
💥 CVE-2024-32002 – Git 子模块路径注入 PoC 动机 在攻克 Hack The Box 平台的 Compiled 靶机过程中，我遇到了一个涉及 Git 和子模块的奇怪行为。深入调查后，我发现了研究员 Amal Murali 撰写的 这篇精彩文章，其中详细介绍了通过 .gitmodules 进行路径注入的技术。在此基础上，我决定研究 CVE-2024-32002 并创建一个能展示该漏洞实际影响的实用 PoC。 🧠 漏洞概述 CVE-2024-32002 利用了 Git 中与子模块路径解析相关的严重缺陷。Git 允许仓库包含在 .gitmodules...
cve-2024-32019-PoC
CVE-2024-32019 — Escalada de privilegios local en ndsudo de Netdata Resumen El helper ndsudo de Netdata instalado con setuid root restringe qué comandos ejecutará, pero resuelve esos comandos usando elPATH del invocador. En las versiones afectadas, un usuario local puede colocar un binario...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
susvibes-jupyter-server-cve-2026-35397
Tarea de Benchmark SusVibes: Resolución de Rutas de Contenido del Servidor Jupyter Este repositorio contiene una tarea completa de benchmark estilo SusVibes construida a partir de una corrección de seguridad real de Python en Jupyter Server. La tarea está diseñada para evaluar si un agente puede...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Rocky Linux 9 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource (crlsa-2026_70191)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202670191 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 Tenable has extracted the preceding description bloc...
CLEANSTART-2026-GN07707 Previously, resolving relative paths containing parent directory ('
Security vulnerability affects the minio-operator package. Previously, resolving relative paths containing parent directory '...