Fedora 45 : wordpress (2026-c7024b3255)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c7024b3255 advisory. WordPress 7.1.2 Security Release Security updates included in this release - Unauthenticated path traversal in page-template resolution leading to conditiona...

voidsyscall

voidsyscall English | 简体中文 | 조선어 | Русский Zero WinAPI. Every NT primitive resolved at runtime from ntdll in memory — SYSCALL instructions issued directly via Plan9 assembly stubs, no import table, no ntdll usermode hooks touched. C2 over HTTPS / DNS / ICMP, AES-256-GCM per message. Windows nativ...

EXPLOIT-CVE-2026-87902

Lab + Exploit — CVE-2026-87902 故意存在漏洞 的实验环境 + Python PoC，针对 CVE-2026-87902 ： WordPress Core 的 page template 解析中存在的未认证 路径遍历， 导致本地文件包含（LFI）和 条件性 RCE。 字段| 值 ---|--- 产品| WordPress Core 受影响版本| 4.7.0 → 7.1.1 修复| 7.1.2 （向后移植至 4.7.37） 类型| 路径遍历（CWE-22）→ LFI → 条件性 RCE 认证| 无 （未认证） CVSS 4.0| 9.2（严重） 发布日期|...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" 우회 PoC Python tarfile 모듈의 경로 탐색 취약점으로, 버전 3.8.0부터 3.13.1까지 영향을 미칩니다. 안전하지 않은 추출을 방지하기 위해 설계된 filter="data" 샌드박스는 PATHMAX4096바이트를 초과하는 경로를 조작하여 우회할 수 있습니다. 이 경우 os.path.realpath가 심볼릭 링크 확인을 조용히 중단합니다. 보안 검사는 안전해 보이는 경로를 보는 반면, 커널은 실제 경로를 확인하므로 추출 디렉터리 외...

hostresolver

HostResolver 현재 버전: 1.0.0 의견 및 버그 신고는 다음으로 보내주세요: [email protected] ==================================================================================== 목차: 1. 개요 2. HostResolver 사용 방법 입력 파일 옵션 및 설정 스캔 출력 ==================================================================================== 개요...

CVE-2025-32463

CVE-2025-32463 エクスプロイト --- 概念実証（PoC） 免責事項: このリポジトリには、教育目的、防御的な研究、および許可を得たペネトレーションテスト のみを意図した概念実証 コードが含まれています。 所有していないシステム、または明示的な書面によるテスト許可を得ていないシステムでこのコードを使用しないでください 。無許可の使用は違法 であり、刑事罰または民事罰につながる可能性があります。著者は、この資料の誤用によって生じたいかなる責任も負いません。 説明 このPoCは、CVE-2025-32463...

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel BPassed to VectorStore query/filter B -- CInMemoryVectorStore evaluates filter expression unsafely C -- DUnsafe attribute resolution via class / base / subclasses D -- EAccess to init.globals containing os and builtins E -- FArbitrary code execution e.g. os.system F --...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

susvibes-jupyter-server-cve-2026-35397

SusVibes 基准测试任务：Jupyter Server 内容路径解析 本仓库包含一个完整的 SusVibes 风格基准测试任务，该任务基于 Jupyter Server 中一个真实的上游 Python 安全修复构建。 该任务旨在评估代理是否能够仅凭普通的 GitHub issue 风格提示重新实现被遮蔽的内容路径解析行为，而无需告知其原始上游变更修复了一个漏洞。功能测试检查普通的文件行为，而隐藏的安全测试则检查实现是否保留了根目录边界。 提交摘要 要求| 状态| 证据 ---|---|--- 真实 Python 安全修复| 完成|...

threat-finder

OffSeq Threat Finder threat-finder は、マニフェストが主張する内容ではなく、ホスト上で 実際に実行されている 脆弱なソフトウェアを見つけ出し、どの検出結果がネットワーク到達可能 かを教えてくれます。実行中の各サービス（および --scope all の場合はインストール済みのすべての OS パッケージ）を正確な Package-URL に解決し、エコシステムネイティブなバージョン規則を用いて OffSeq Radar カタログと照合するため、バックポート/修正済みビルドが誤検出されることはありません。 Vulnerability summary...

Reverse_ip_Multithreading1

ReverseipMultithreading1 기부 : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2018-1058

CVE-2018-1058 — PostgreSQL 검색 경로 데모 이 저장소에는 다음에 대한 최종 보고서와 재현 산출물이 포함되어 있습니다: CVE-2018-1058: 통제되지 않은 검색 경로를 통한 PostgreSQL 권한 상승 목표는 안전한 로컬 Docker 환경을 사용하여 CVE-2018-1058의 배후에 있는 검색 경로 신뢰 실패를 시연하는 것입니다. 이 데모는 정확한 역사적 pgdump 실행 경로를 재현하지 않습니다. 대신 PostgreSQL 지침에 설명된 동일한 근본 원인을 재현합니다: 공격자가 쓰기 가능한 스키마에 ...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc 컨테이너 탈옥 해부 호스트 루트 탈출에 대한 고급 퍼플 팀링 및 포렌식 분석 🛡️ 개요 이 저장소는 runc버전 1.0-rc1 1.0-rc6의 치명적인 취약점인 CVE-2019-5736 에 대한 고충실도 해부 및 개념 증명PoC을 포함합니다. 이 익스플로잇은 루트 권한을 가진 악성 컨테이너가 호스트의 runc 바이너리를 덮어쓰고 완전한 호스트 루트 액세스 ...

CVE-2021-3310

CVE-2021-3310 Western Digital MyCloud PR4100 のリンク解決における情報漏洩の脆弱性 同梱のファイルを使用して mycloud OS 3 で脆弱性を引き起こします。これは OS 5 でパッチが適用されています。...