51 matches found
ROS-20260817-73-0019
The vulnerability of the Microsoft .NET software platform and the code editor Visual Studio Code is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2026-70427
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of .tar and .tar.gz archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary...
The vulnerability of the Microsoft .NET software platform and the Visual Studio Code editor, related to errors in handling symbolic links, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Microsoft .NET software platform and the code editor Visual Studio Code is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Windows operating system backup services allows attackers to increase their privileges.
The vulnerability of Windows operating system backup services is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-59674
A flaw was found in suricata. This vulnerability, related to improper handling of symbolic links, allows a local suricata user to escalate their privileges to root. By exploiting this, an attacker could gain full control over the affected system. Mitigation No mitigation is necessary for Red Hat'...
The vulnerability of the Collaborative Translation Framework (CTFMON) subsystem in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Collaborative Translation Framework CTFMON in Windows operating systems is related to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the improper handling of symbolic links before accessing a file. This vulnerability allows attackers to write arbitrary files.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to write arbitrary files...
The vulnerability of the Archive Utility component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Archive Utility component in macOS operating systems is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Apple macOS 安全漏洞
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Vulnerabilities exist in versions of Apple macOS such as Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4. These vulnerabilities stem from improper handling of symbolic links, which may allow...
The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Winlogon entry program in Windows operating systems is related to the incorrect definition of symbolic links during access to the file. Exploiting this vulnerability can allow attackers to enhance their privileges...
OPENSUSE-SU-2026:20273-1 Security update for 7zip
This update for 7zip fixes the following issues: - Update to 25.01 boo1249130 The code for handling symbolic links has been changed to provide greater security when extracting files from archives Command line switch -snld20 can be used to bypass default security checks when creating symbolic link...
USN-7984-1 pagure vulnerabilities
Thomas Chauchefoin discovered that Pagure incorrectly handled symbolic links in Git repositories. A remote attacker could possibly use this issue to cause Pagure to expose files outside the intended repository boundaries. CVE-2024-4981 Thomas Chauchefoin discovered that Pagure did not properly...
CVE-2025-8110
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
EUVD-2025-202425
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
CVE-2025-8110: Improper Limitation of a Pathname to a Restricted Directory
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
Argo Workflows 操作系统命令注入漏洞
Argo Workflows is an open source container-native workflow engine for Kubernetes from the Argo project. An operating system command injection vulnerability exists in Argo Workflows versions 3.6.13 and earlier and versions 3.7.0 through 3.7.4, which stems from improper handling of symbolic links a...
PT-2025-50327
Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.13.0 Description A path traversal flaw exists in the PutContents API of Gogs, a self-hosted Git service. The issue stems from improper symbolic link handling, which allows authenticated attackers to bypass security...
The vulnerability of the checkout() and pull() functions in Git’s version control extensions allows a malicious actor to gain access to and write arbitrary files.
The vulnerability of the checkout and pull functions in Git’s version control extensions for large Git LFS files is related to the improper definition of symbolic links during file access. Exploiting this vulnerability could allow an attacker to gain access to arbitrary files...
CVE-2025-8917 Path Traversal Leading to Remote Code Execution in allegroai/clearml
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...