DEBIAN-CVE-2026-100419

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious repository trees...

CVE-2026-100419

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious repository trees...

CVE-2026-100419

gitoxide gix-fs before 0.23.0 is vulnerable to a path validation bypass in its worktree checkout mechanism. When performing a forced checkout with overwrite_existing enabled, an attacker can craft a malicious repository tree using symlink manipulation to escape the worktree directory. The root ca...

CVE-2026-100419 gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious repository trees...

CVE-2026-100419 gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious repository trees...

CVE-2024-32002-poc

Bash 脚本： !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize hook...

CVE-2026-17106

CVE-2026-17106 — CopyEscape: escritura arbitraria de archivos de contenedor a host mediante docker cp Imagen de distribución de HackSpeak. Este repositorio es un espejo de distribución del PoC CopyEscape CVE-2026-17106 publicado por el equipo rojo de Imperva Ron Masas ; el código es idéntico al...

CopyEscape-CVE-2026-17106

CopyEscape: Tomando Control de Hosts Docker con docker cp CVE-2026-17106 Este es el repositorio de prueba de concepto para la entrada de blog CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape permite que un contenedor malicioso en ejecución compita con el productor d...

CVE-2026-64824-PoC

CVE-2026-64824 — Path traversal por enlace simbólico en la copia de seguridad y restauración de Home Assistant Core → RCE CVSS 8.4 Crítico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Un atacante autenticado admin sube un tar de copia de seguridad manipulado. La ruta de restauración extrae el...

CVE-2025-68937

CVE-2025-68937 - RCE por Symlink en Plantillas de Gitea/Forgejo Prueba de concepto automatizada para CVE-2025-68937 : salto de directorio mediante el seguimiento de enlaces simbólicos en el procesamiento de repositorios plantilla de Gitea y Forgejo, que conduce a la ejecución remota de código...

CVE-2026-80430

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

EUVD-2026-87063

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

CVE-2026-80430

The kitty terminal emulator (versions 0.47.0 before 0.49.0 ) is vulnerable to an improper link resolution flaw in its drag and drop protocol. The root cause lies in subdir_data_for_drag() within kitty/dnd.c, which constructs path strings instead of walking the tree component by component. This al...

CVE-2026-80430 Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

CVE-2026-98141

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...

DEBIAN-CVE-2026-98141

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...

AZL-104555 CVE-2026-97949 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

AZL-104570 CVE-2026-97950 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-98141

The Linux kernel contains a vulnerability in the ntfs component where the update_reparse_data() function incorrectly ignores the return value of set_reparse_index(). When an index insertion fails, the system removes the written reparse data as cleanup but still returns 0, causing symlink(2) and W...

CVE-2026-98141 ntfs: propagate reparse index insertion failure

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...