CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

SparstanBoogie

SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...

CVE-2025-8110

CVE-2025-8110 Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. How does this detection method work? Extracts the Gogs version from the footer of /user/login via regex Gogs Version: X.X.X and flags instances running version 0.13.3 or earlier as...

git_rce

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

git_rce

CVE-2024-32002: git clone을 통한 Git RCE 악용 이 저장소는 git clone 작업 중 RCE를 허용하는 Git의 취약점인 CVE-2024-32002를 악용하는 PoC를 포함합니다. 공격자는 특정 방식으로 서브모듈이 포함된 저장소를 제작하여 대소문자를 구분하지 않는 파일시스템에서 심볼릭 링크 처리를 악용하고, .git/ 디렉터리에 파일을 작성하여 악성 훅의 실행을 유도할 수 있습니다. 참고: 이 PoC는 Windows 또는 Mac 시스템에서만 작동합니다. 블로그 게시글 이 익스플로잇이 어떻게...

CVE-2025-8110

CVE-2025-8110 – PoC RCE per Gogs ≤ 0.13.3 Proof-of-Concept per CVE-2025-8110 , una scrittura arbitraria di file autenticata in Gogs ≤ 0.13.3 causata da una gestione impropria dei link simbolici nell'API PutContents. Un utente autenticato può eseguire il commit di un symlink che punta a .git/confi...

7Ziprowler

7-ZiProwler CVE-2025-11001 Übersicht In diesem Repository werden die Ergebnisse meiner kurzen Recherche zu CVE-2025-11001 vorgestellt. Der Exploit ist in Python geschrieben und nutzt den Projektmanager astral uv. Referenzen Einige: NIST ZDI CVE News WIZ Kurze Analyse Ich werde nicht zu tief in di...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420-Mitigationstoolkit Defensives Toolkit zur Behebung, Prüfung und Verifizierung für CVE-2026-54420 , das das LiteSpeed-cPanel-Plugin in Shared-Hosting-Umgebungen mit CloudLinux / CageFS betrifft. ⚠️ Sicherheitshinweis Dieses Repository ist ausschließlich für Systemadministratoren,...

CVE-2025-27591

CVE-2025-27591 - Escalata dei privilegi tramite gestione non sicura dei log Panoramica CVE-2025-27591 è una vulnerabilità di escalation locale dei privilegi nell'utility below versioni precedenti alla release corretta causata da gestione non sicura dei link simbolici all'interno del suo meccanism...

CVE-2026-44517

A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...

Astra Linux – Vulnerability in multipath-tools

Multipath-tools versions 0.7.7 through 0.9.x, prior to 0.9.2, allowed local users to obtain root access. This vulnerability was exploited in conjunction with CVE-2022-41974. Local users who had access to /dev/shm could modify symlinks within multipathd due to incorrect symlink handling. This coul...

CVE-2026-16991

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation caused by improper handling of symbolic links; a low-privilege local attacker can exploit this to gain full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit or patch details are provid...

CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

PT-2026-79169

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links...

MiracleLinux 8 : osbuild-composer-101.5-1.el8_10.ML.1 (AXSA:2026-1558:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1558:08 advisory. google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation CVE-2026-33186...

PT-2026-77165

Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.64 Description The image analyze tool fails to canonicalize symlinks before reading files, leading to a path traversal issue. This allows attackers to create workspace symlinks that point to external files with...

PT-2026-72565

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of AS RELEASE ALWAYS for symlinks and mountpoints Regular AFS files correctly use afs file aops which have release folio set as netfs release folio, so AS RELEASE ALWAYS is valid for them when fscache is enabl...

CVE-2026-53785 rsync < 3.5.0 Path Traversal Write Escape via --relative Mode

rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...

PT-2026-71624

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A path traversal issue exists when using --relative mode. A malicious sender can write files outside the intended destination directory tree by crafting relative paths containing symlink components. Th...

CVE-2025-30240

CVE-2025-30240 affects TP-Link Aginet devices. The issue arises from improper validation of symbolic links on external USB storage, allowing an attacker to cause the system to resolve a crafted symlink and potentially read sensitive files from the device filesystem. Exploitation details and exact...