CVE-2025-4138

CVE-2025-4138 Python Tarfile 模块目录遍历漏洞，带溢出的跨目录 影响：权限提升 工作原理： Python 的 TarFile.extractall 和 TarFile.extract 方法支持设置过滤器以提高这些方法使用时的安全性。Python 标准库提供了两种实现 tarfilter "tar" 和 datafilter "data" ，各自具有不同的检查措施来提升 tar 文件提取的安全性。 当处理包含符号链接的路径时，如果该路径短于 PATHMAX ，但在通过 os.path.realpath 替换符号链接后长于 PATHMAX ，则存在一个漏洞。任何超...

CVE-2026-58106

CodeChecker through 6.28.2 contains an incomplete fix for CVE-2025-40843. In ldlogger-tool-gcc.c:129 , the bounded helper safe_strcpy() is called with the full PATH_MAX size, but the destination is fullPath + 2 , leaving only 4094 bytes. Because safe_strcpy() is a strncpy() that NUL-pads to the f...

CVE-2026-58106 Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy with a bounded safestrcpy helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATHMAX. safestrcpy is strncpy, which...

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Bypass del filtro di tarfile Python tramite escape dei symlink con PATHMAX Scrittura arbitraria di file tramite estrazione confilter="data" / filter="tar" Indice Panoramica Dettagli della vulnerabilità Com...

CVE-2025-4138_tarfile_filter_bypass

CVE-2025-4138 — Bypass del filtro filter="data" di Python tarfile Scrittura arbitraria di file al di fuori della directory di estrazione tramite una catena di symlink PATHMAX. Versioni interessate Python 3.12.0 – 3.12.10 Python 3.13.0 – 3.13.3 Corretto in 3.12.11 / 3.13.4 Crediti: Segnalazione:...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Bypass del filtro "data" di Python tarfile PoC Vulnerabilità di path traversal nel modulo tarfile di Python, che interessa le versioni dalla 3.8.0 alla 3.13.1. La sandbox filter="data" — pensata per prevenire estrazioni non sicure — può essere bypassata creando percorsi che supera...

PyPath-Escape-CVE-2025-4517-Exploit-Research

🛡️ PyPath-Escape: Toolkit Avanzato per il Bypass di PATHMAX Autore: Beriwalarohit Target di Ricerca: CVE-2025-4517 / CVE-2025-4138 ██████╗ ███████╗██████╗ ██╗██╗ ██╗ █████╗ ██╗ █████╗ ██████╗ ██╔══██╗██╔════╝██╔══██╗██║██║ ██║██╔══██╗██║ ██╔══██╗██╔══██╗ ██████╔╝█████╗ ██████╔╝██║██║ █╗...

CVE-2025-4138-poc

CVE-2025-4138 Generatore Auto-Sudo Uno script Python per generare un archivio tar malevolo che sfrutta CVE-2025-4138 / CVE-2025-4517 Path Traversal tramite troncamento di PATHMAX. Lo sfruttamento riuscito di questa vulnerabilità consente a un attaccante di aggirare i filtri di estrazione di tarfi...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX बाईपास PoC लेखक: d3vn0mi root@kitploit: / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi अवलोकन CVE-2025-4138 के...

CVE-2025-4517-POC-Sudoers

CVE-2025-4517 - POC zum Hinzufügen eines Benutzers zu sudoers Dieses Skript ist eine weaponisierte Version der im Google Security Research Advisory: https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f veröffentlichten Forschung. Während die ursprüngliche Forschung...

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Bypass del filtro dati di Python tarfile tramite overflow di PATHMAX Autore: 0xDTC CVE: CVE-2025-4517 / CVE-2025-4330 Avviso: GHSA-6r6c-684h-9j7p Correzione CPython: PR 135037 Panoramica tarfile.extractallfilter="data" di Python dovrebbe estrarre archivi tar in mod...

EUVD-2016-1713

Malware in sbrugna...

EUVD-2024-52029

Malicious code in bioql PyPI...

CVE-2024-53685

In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATHMAX If the full path to be built by cephmdscbuildpath happens to be longer than PATHMAX, then this function will enter an endless retry loop, effectively blocking the whole task. Most of the...

CVE-2024-53685

In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATHMAX If the full path to be built by cephmdscbuildpath happens to be longer than PATHMAX, then this function will enter an endless retry loop, effectively blocking the whole task. Most of the...

CVE-2024-53685

In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATHMAX If the full path to be built by cephmdscbuildpath happens to be longer than PATHMAX, then this function will enter an endless retry loop, effectively blocking the whole task. Most of the...

CVE-2024-53685 ceph: give up on paths longer than PATH_MAX

In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATHMAX If the full path to be built by cephmdscbuildpath happens to be longer than PATHMAX, then this function will enter an endless retry loop, effectively blocking the whole task. Most of the...

CVE-2024-53685

CVE-2024-53685 concerns the Linux kernel Ceph path construction: when the full path built by ceph_mdsc_build_path() exceeds PATH_MAX, the function enters an endless retry loop, effectively DoS-ing the system. The description notes the fix is to remove the retry and fail with ENAMETOOLONG instead,...

CVE-2023-52618

In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since "devsearchpath" can technically be as large as PATHMAX, there was a risk of truncation when copying it and a second string into "fullpath" since it was also PATHMAX sized...

CVE-2023-52618 block/rnbd-srv: Check for unlikely string overflow

In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since "devsearchpath" can technically be as large as PATHMAX, there was a risk of truncation when copying it and a second string into "fullpath" since it was also PATHMAX sized...