CVE-2025-8110-Gogs-RCE-Exploit

Exploit RCE pour Gogs CVE-2025-8110 Un exploit Python automatisé pour CVE-2025-8110 dans Gogs. Cette vulnérabilité permet l'exécution de code à distance RCE en abusant de l'API PutContents, qui ne valide pas si un chemin de fichier est un lien symbolique. En écrasant le fichier interne .git/confi...

CVE-2026-31802

🛡️ CVE-2026-31802 - Visionneuse simple de Preuve de Concept 📋 À propos de CVE-2026-31802 Ce dépôt fournit une preuve de concept PoC et un rapport détaillé pour CVE-2026-31802. Le problème est une vulnérabilité de sécurité dans le paquet npm tar. Elle permet aux attaquants de tromper le logiciel...

CVE-2025-27591

CVE-2025-27591 – Élévation de privilèges via abus de lien symbolique dans below 🛑 Avertissement : cet exploit est fourni uniquement à des fins de tests de sécurité éducatifs et autorisés. Toute utilisation non autorisée peut être illégale. 🧠 Aperçu below est un outil de surveillance des...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 Kit de Mitigation Kit de correction défensive, d'audit et de vérification pour CVE-2026-54420 affectant le Plugin LiteSpeed cPanel dans les environnements d'hébergement partagé utilisant CloudLinux / CageFS. ⚠️ Avis de sécurité Ce dépôt est destiné uniquement aux administrateurs...

Astra Linux – Vulnerability in php-pear

In ArchiveTar version 1.4.11, the Tar.php script allows write operations involving directory traversal, due to insufficient checking of symbolic links. This issue is related to CVE-2020-28948...

Amazon Linux 2 : acl, --advisory ALAS2-2026-3831 (ALAS-2026-3831)

The version of acl installed on the remote host is prior to 2.2.51-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3831 advisory. A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this...

CVE-2026-65010 Datasets Symlink-following Arbitrary File Write via Extractor.extract()

Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in...

CVE-2026-16552

Removed by vendor...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

CVE-2026-64615

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-65067

The Data::Intern::Shared Perl module (versions prior to 0.02 ) contains a vulnerability where it creates a world-readable mmap backing file. The flaw exists in intern.h , where the open() function is called with a mode of 0666 without the O_EXCL or O_NOFOLLOW flags. Under a default umask of 022, ...

CVE-2026-65066

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

EUVD-2026-46048

The mv, cp, and rm file utilities exposed within the ExtremeXOS EXOS shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with low-privilege CLI access can create a symbolic link that references a privileged filesyst...

EUVD-2026-45941

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

Exploit for Path Traversal in Gogs

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de...

Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

SummaryThe SQLite databases are created at predictable static paths in /tmp. Any user can therefore create a symlink at these paths in /tmp pointing to arbitrary files. The monitoring scripts then follows these symlinks and then creates their database at the symlink target.This becomes really...

EUVD-2026-42056

AWS Research and Engineering Studio RES is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS. Improper link resolution before file access issue CWE-59 in the Auth.GetUserPrivateKey API. An authenticated remot...

CVE-2026-14904

AWS Research and Engineering Studio RES is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS. Improper link resolution before file access issue CWE-59 in the Auth.GetUserPrivateKey API. An authenticated remot...

SUSE CVE-2026-11322

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or directories outside the designated workspace root. Attackers can exploit the workspace file and listing APIs, which resolve...

CVE-2026-59195

CVE-2026-59195 affects pnpm prior to versions 10.34.4 and 11.8.0. The issue arises when pnpm reads package names from the env lockfile’s configDependencies section and uses those names directly to create config dependency symlinks under node_modules/.pnpm-config. A crafted pnpm-lock.yaml with a t...