CVE-2025-11001---7-Zip

CVE-2025-11001 - 7-Zip Recorrido de enlaces simbólicos de alta gravedad en 7-Zip que permite escritura arbitraria de archivos / RCE Corregido en 7-Zip 25.00 julio de 2025 – Exploit público disponible SOLO PARA PRUEBAS DE SEGURIDAD E INVESTIGACIÓN AUTORIZADAS -critical Resumen de la vulnerabilidad...

Se7enSlip

🔒 Se7enSlip - 7-Zip Vulnerability Scanner A stunning, interactive web application that demonstrates and helps detect the critical CVE-2023-52169 symlink traversal vulnerability in 7-Zip archives. ⚡ Features 🎯 Core Functionality ZIP Upload & Analysis - Drag & drop or click to upload ZIP files for...

CVE-2026-31802

CVE-2026-31802: tar Symlink Path Traversal / Arbitrary File Overwrite Research: Joshua van Rijswijk Description This repository contains my proof of concept and write-up for CVE-2026-31802 , a high-severity vulnerability in the npm tar package node-tar affecting versions = 7.5.10. I found that ta...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip シンボリックリンク任意ファイル書き込み PoC CVE-2025-55188 説明 この概念実証は、CVE-2025-55188 を示しています。これは、7-Zip の 25.01 より前のバージョンの脆弱性です。 この欠陥は、7-Zip が展開中に シンボリックリンク を適切に処理しないために発生し、細工されたアーカイブがターゲットシステム上の任意のファイルを上書きできるようになります。 被害者が悪意のあるアーカイブを展開すると、攻撃者は以下を行うことができます： 機密ファイル（例:...

SUSE SLED15: acl / attr / libacl-devel / libacl1 / libacl1-32bit / libattr-devel / etc (SUSE-SU-2026:4176-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4176-1 advisory. This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink...

CVE-2026-77179

On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.38 packages and security update

Red Hat OpenShift Container Platform release 4.20.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Escritura Arbitraria de Archivos mediante Symlink Traversal Resumen Gogs = 0.13.3 es vulnerable a la escritura arbitraria de archivos a través de la API PutContents /api/v1/repos/:owner/:repo/contents/:path. La API valida rutas de archivo para secuencias de directory...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

RHEL 9 : acl (RHSA-2026:67144)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67144 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfac...

Fedora 45 : perl-DBI (2026-2bf3261da2)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2bf3261da2 advisory. 1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbmtype/dbmmldbm CVE-2026-78030 Tighten symlink outside of fdir CVE-2026-153...

CVE-2025-8110

CVE-2025-8110 — Gogs Symlink Traversal → RCE Overview CVE-2025-8110 is a critical vulnerability in Gogs self-hosted Git service versions = 0.13.3. The PutContents API validates file paths for directory-traversal ../ but does not resolve symbolic links before writing. An authenticated user can pus...

CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...

UBUNTU-CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

OPENSUSE-SU-2026:21832-1 Security update for acl, attr

This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...