CVE-2026-107166

The Open5GS software (versions up to 2.7.7 ) is vulnerable to a remote attack affecting the GTP-U Receive Path component. The flaw exists in the ogs_pfcp_xact_local_create function within the src/upf/gtp-path.c file, where a manipulation can lead to an allocation of resources (CWE-770, CWE-400). ...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares

Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.5 Vulnerability Details CVEID:CVE-2026-63435 DESCRIPTION: Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...

-Linux-PrivEsc-CVE-2024-48990

Privesc-need-restart-2024-48990 漏洞利用说明 CVE-2024-48990 - Pure Python 该脚本通过劫持库路径（ PYTHONPATH hijacking ）利用 Linux 工具 needrestart 中的漏洞 CVE-2024-48990 。与原始攻击向量不同，此方法仅使用 Python，从而绕过了在目标机器上安装 gcc 等编译器的要求。 逐步工作原理 1. 目录结构： 创建目录 /tmp/malicious/importlib。这模仿了 Python 标准库的结构。 2. 恶意载荷（importlib/init.py）：...

CVE-2026-49009

▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀░...

CVE-2026-106560

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

EUVD-2026-94373

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560

The Backstage open framework for developer portals contains an improper repository path validation vulnerability in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package. Specifically, a scaffolder backend module fails to properly validate repository paths, allowing an au...

CVE-2020-5421

Spring セキュリティ脆弱性 CVE-2020-5421 再現 脆弱性概要 CVE-2020-5421 は、jsessionid パスパラメータを使用して、RFD 攻撃に対する防御をバイパスする可能性があります。以前の RFD に対する保護は、CVE-2015-5211 に対応するために追加されました。 RFD とは 反射型ファイルダウンロード脆弱性 RFD は、信頼できるドメインから仮想的にファイルをダウンロードさせることで、攻撃者が被害者のコンピュータへの完全なアクセス権を取得できる攻撃手法です。 影響を受けるバージョン Spring Framework 5.2.0 - 5.2....

CVE-2026-77621

A flaw was found in Vector. A path traversal vulnerability in the file sink may allow a remote attacker who controls event fields referenced in the output path template to create or overwrite arbitrary files with the privileges of the Vector process. Depending on the files affected, this may resu...

Path-Traversal-CVE-2024-4956

此存储库没有 README。...

GO-2026-6662 SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/* in github.com/siyuan-note/siyuan/kernel

SiYuan: /history/path and /repo/diff/path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/ in github.com/siyuan-note/siyuan/kernel...

CVE-2021-41773

Apache HTTP Server 2.4.49 - 路径遍历与远程代码执行 CVE-2021-41773 一个基于 Python 的高级概念验证 PoC 利用工具，针对 CVE-2021-41773 。该工具自动化测试 Apache 2.4.49 服务器是否存在路径遍历和远程代码执行 RCE 漏洞。 ⚠️ 法律免责声明 本工具仅用于教育目的 ，以及经授权的安全审计和渗透测试。未经明确事先许可，访问或试图利用目标系统是违法且不道德的。开发者不对因使用本程序而导致的任何滥用或损害承担责任。 📖 背景 在 Apache HTTP Server 2.4.49...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 脆弱性ラボ このリポジトリは、CVE-2025-7775 の nuclei テンプレートをテストするための脆弱な環境を提供します。 実行方法 docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app 脆弱性テスト 1. リモートコマンド実行 RCE curl -X POST http://localhost:5000/api/v1/configuration \ -H "Content-Type: application/json" \ -d...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...