CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Escritura Arbitraria de Archivos mediante Symlink Traversal Resumen Gogs = 0.13.3 es vulnerable a la escritura arbitraria de archivos a través de la API PutContents /api/v1/repos/:owner/:repo/contents/:path. La API valida rutas de archivo para secuencias de directory...

CVE-2025-8110

CVE-2025-8110 — Gogs Symlink Traversal → RCE Overview CVE-2025-8110 is a critical vulnerability in Gogs self-hosted Git service versions = 0.13.3. The PutContents API validates file paths for directory-traversal ../ but does not resolve symbolic links before writing. An authenticated user can pus...

CVE-2025-11001---7-Zip

CVE-2025-11001 - 7-Zip Recorrido de enlaces simbólicos de alta gravedad en 7-Zip que permite escritura arbitraria de archivos / RCE Corregido en 7-Zip 25.00 julio de 2025 – Exploit público disponible SOLO PARA PRUEBAS DE SEGURIDAD E INVESTIGACIÓN AUTORIZADAS -critical Resumen de la vulnerabilidad...

CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...

Se7enSlip

🔒 Se7enSlip - 7-Zip Vulnerability Scanner A stunning, interactive web application that demonstrates and helps detect the critical CVE-2023-52169 symlink traversal vulnerability in 7-Zip archives. ⚡ Features 🎯 Core Functionality ZIP Upload & Analysis - Drag & drop or click to upload ZIP files for...

CVE-2026-31802

CVE-2026-31802: tar Symlink Path Traversal / Arbitrary File Overwrite Research: Joshua van Rijswijk Description This repository contains my proof of concept and write-up for CVE-2026-31802 , a high-severity vulnerability in the npm tar package node-tar affecting versions = 7.5.10. I found that ta...

CentOS Linux 8.5 [TuxCare] Security Update: acl / libacl / libacl-devel Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1785151703)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785151703 advisory. - acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

Rocky Linux 8 [CIQ] Security Update: acl / acl-debuginfo / acl-debugsource / libacl / libacl-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_43420)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202643420 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370 Tenable h...

Rocky Linux 9.6 [TuxCare] Security Update: attr / libattr / libattr-devel (ALMALINUX9.6:CLSA-2026:1787148007)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787148007 advisory. - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers t...

CentOS Linux 8 [TuxCare] Security Update: acl / libacl / libacl-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1785151239)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1785151239 advisory. - acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile,...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1778838399)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778838399 advisory. - On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target ...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1762180294)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762180294 advisory. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause...

AlmaLinux 9.6 [TuxCare] Security Update: attr / libattr / libattr-devel (ALMALINUX9.6:CLSA-2026:1787148007)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787148007 advisory. - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2024_9051)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249051 advisory. Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction CVE-2024-9407 buildah: Buildah allows arbitrary...

Rocky Linux 9 [CIQ] Security Update: attr / attr-debuginfo / attr-debugsource / libattr / etc (crlsa-2026_60226)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202660226 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 10.2 [CIQ] Security Update: acl / acl-debuginfo / acl-debugsource / libacl / libacl-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_42739)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202642739 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370 Tenabl...

CentOS Linux 8.4 [TuxCare] Security Update: acl / libacl / libacl-devel Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1785151263)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1785151263 advisory. - acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

Rocky Linux 10.2 [CIQ] Security Update: attr / attr-debuginfo / attr-debugsource / libattr / etc (crlsa-2026_59380)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202659380 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 8 [CIQ] Security Update: attr / attr-debuginfo / attr-debugsource / libattr / etc (crlsa-2026_56133)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202656133 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the CIQ...