CVE-2026-107166

The Open5GS software (versions up to 2.7.7 ) is vulnerable to a remote attack affecting the GTP-U Receive Path component. The flaw exists in the ogs_pfcp_xact_local_create function within the src/upf/gtp-path.c file, where a manipulation can lead to an allocation of resources (CWE-770, CWE-400). ...

EUVD-2026-94412

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares

Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.5 Vulnerability Details CVEID:CVE-2026-63435 DESCRIPTION: Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...

-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 漏洞利用说明 CVE-2024-48990 - Pure Python 该脚本通过劫持库路径（ PYTHONPATH hijacking ）利用 Linux 工具 needrestart 中的漏洞 CVE-2024-48990 。与原始攻击向量不同，此方法仅使用 Python，从而绕过了在目标机器上安装 gcc 等编译器的要求。 逐步工作原理 1. 目录结构： 创建目录 /tmp/malicious/importlib。这模仿了 Python 标准库的结构。 2. 恶意载荷（importlib/init.py）：...

CVE-2026-49009

▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀░...

CVE-2026-106560

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560

The Backstage open framework for developer portals contains an improper repository path validation vulnerability in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package. Specifically, a scaffolder backend module fails to properly validate repository paths, allowing an au...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

EUVD-2026-94373

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2020-5421

Spring 安全漏洞 CVE-2020-5421复现 漏洞概述 CVE-2020-5421 可通过jsessionid路径参数，绕过防御RFD攻击的保护。先前针对RFD的防护是为应对 CVE-2015-5211 添加的。 什么是RFD 反射型文件下载漏洞RFD是一种攻击技术，通过从受信任的域虚拟下载文件，攻击者可以获得对受害者计算机的完全访问权限。 影响版本 Spring Framework 5.2.0 - 5.2.8 Spring Framework 5.1.0 - 5.1.17 Spring Framework 5.0.0 - 5.0.18 Spring Framework 4.3...

CVE-2026-77621

A flaw was found in Vector. A path traversal vulnerability in the file sink may allow a remote attacker who controls event fields referenced in the output path template to create or overwrite arbitrary files with the privileges of the Vector process. Depending on the files affected, this may resu...

Path-Traversal-CVE-2024-4956

此存储库没有 README。...

GO-2026-6662 SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/* in github.com/siyuan-note/siyuan/kernel

SiYuan: /history/path and /repo/diff/path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/ in github.com/siyuan-note/siyuan/kernel...

CVE-2021-41773

Apache HTTP Server 2.4.49 - 路径遍历与远程代码执行 CVE-2021-41773 一个基于 Python 的高级概念验证 PoC 利用工具，针对 CVE-2021-41773 。该工具自动化测试 Apache 2.4.49 服务器是否存在路径遍历和远程代码执行 RCE 漏洞。 ⚠️ 法律免责声明 本工具仅用于教育目的 ，以及经授权的安全审计和渗透测试。未经明确事先许可，访问或试图利用目标系统是违法且不道德的。开发者不对因使用本程序而导致的任何滥用或损害承担责任。 📖 背景 在 Apache HTTP Server 2.4.49...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 脆弱性ラボ このリポジトリは、CVE-2025-7775 の nuclei テンプレートをテストするための脆弱な環境を提供します。 実行方法 docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app 脆弱性テスト 1. リモートコマンド実行 RCE curl -X POST http://localhost:5000/api/v1/configuration \ -H "Content-Type: application/json" \ -d...