CVE-2025-55182

CVE-2025-55182 RCE Ferramenta de verificação pessoal para verificar a vulnerabilidade CVE-2025-55182 Princípio da vulnerabilidade Os React Server Components, ao decodificar o payload enviado ao endpoint da função do servidor, apresentam uma falha na resolução de caminhos. Eles usam dois pontos pa...

cve-2024-32019-PoC

CVE-2024-32019 — Netdata ndsudo Escalada de Privilegios Local Resumen El asistente ndsudo de Netdata instalado como setuid root restringe qué comandos ejecutará, pero resuelve esos comandos usando elPATH de quien lo invoca. En las versiones afectadas, un usuario local puede colocar un binario...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2023-38408

Vulnerabilità OpenSSH - CVE-2023-38408 📚 Introduzione È stata trovata una vulnerabilità in OpenSSH versioni precedenti alla 9.3p2. La funzionalità PKCS11 in ssh-agent in OpenSSH ha un percorso di ricerca non sufficientemente affidabile, portando a esecuzione remota di codice se un agente viene...

CVE-2025-33053-Checker-PoC

Checker della vulnerabilità CVE-2025-33053 e Proof-of-Concept PoC Prova del Checker Prova del PoC Una suite completa di strumenti per verificare e dimostrare la potenziale sfruttabilità di CVE-2025-33053 , una vulnerabilità critica di Remote Code Execution RCE basata su WebDAV che colpisce i...

CVE-2026-32202

Zero-Click-Erzwingung der Authentifizierung: Das Anzeigen eines Ordners mit der manipulierten .lnk-Datei löst während der Symbolwiedergabe eine UNC-Auflösung aus, wodurch das Opfer zu einer vom Angreifer gesteuerten ausgehenden Verbindung gezwungen wird, die dessen Net-NTLMv2-Anmeldeinformationen...

CVE-2026-78680 NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

EUVD-2026-65226

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

CVE-2025-24054

Rivelazione Hash NTLMv2-SSP Zero Click in Windows File Explorer 🎥 Dimostrazione POC + Bypass patch di marzo 2025 🎥 bypass patch Clicca sull'immagine sopra per vedere la dimostrazione della vulnerabilità 📋 Panoramica Tecnica Questo repository fornisce un framework di ricerca completo che analizza ...

cve-2024-32002-poc

💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivazione Durante la risoluzione della macchina Compiled della piattaforma Hack The Box, mi sono imbattuto in un comportamento curioso che coinvolge Git e sottomoduli. Investigando più a fondo, ho trovato questo eccellente post del ricercatore...

BIT-GOLANG-2026-56860 Avoid quadratic complexity in resolvePath in net/url

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

CVE-2026-72456

A flaw was found in AppArmor within the Linux kernel. When the getcurrentexepath function encounters a path resolution failure, it fails to properly release file and path references. This resource leak could be exploited by a local attacker, potentially leading to a Denial of Service DoS by...

CVE-2026-49421

The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but failed to pass it through to the underlying path lookup. The flag was silently dropped, so path resolution was not actually restricted. A process that uses ATRESOLVEBENEATH with unlinkat2 or...

CVE-2026-49421

CVE-2026-49421 affects the FreeBSD kernel in all supported versions. The kernel function implementing unlinkat(2) and funlinkat(2) validated the AT_RESOLVE_BENEATH flag but failed to pass it to the underlying path lookup, silently dropping it. As a result, path resolution is not actually confined...

CVE-2026-72456

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure getcurrentexepath takes both an exefile reference and a path reference before resolving the path name. If aapathname failed, it returned immediately and leaked both references...

CVE-2026-72456

CVE-2026-72456 affects the Linux kernel's apparmor path handling. The vulnerability arises in get_current_exe_path(), which takes both an exe_file reference and a path reference before resolving the path name. If aa_path_name() fails, the function could return early and leak both references. The ...

CVE-2026-72456 apparmor: release exe file resources on path failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure getcurrentexepath takes both an exefile reference and a path reference before resolving the path name. If aapathname failed, it returned immediately and leaked both references...

CVE-2026-72456 apparmor: release exe file resources on path failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure getcurrentexepath takes both an exefile reference and a path reference before resolving the path name. If aapathname failed, it returned immediately and leaked both references...

CVE-2026-56860

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...