trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass В 2023 году Trellix объявила 1, что исправила +61 000 проектов с открытым исходным кодом от CVE-2007-4559, старой уязвимости обхода пути. Анализируя их патч, легко заметить, что его можно обойти с помощью симлинка. Обход пути через симлинк — это старая техника, и она...

CVE-2025-24104

CVE-2025-24104: Разбор чтения файлов за пределами песочницы Я сообщил об ошибке, которую Apple позже отследила как CVE-2025-24104. В моём первоначальном отчёте я продемонстрировал, как вредоносная резервная копия может использоваться для обхода ограничений песочницы. Однако в первоначальном...

CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 est un contournement du correctif de PrintDemon CVE-2020-1048 via un répertoire de jonction Junction Directory, conçu pour remédier à une vulnérabilité d'élévation de privilèges EoP\d'élévation de privilège locale LPE affectant le service Spouleur d'impression de...

CVE-2026-79676 NLTK before 3.10.3 Path Traversal via Symlink Bypass

NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open instead of nltk.pathsec.open, allowing symlinks to escape trusted roots. Attackers who stage symlinked corpus files under a trusted data root can disclose...

CVE-2026-79676

NLTK versions before 3.10.3 are affected by a path traversal vulnerability in its corpus readers. The root cause is that these readers reopen root-derived paths using the built-in open() instead of nltk.pathsec.open(), which fails to resolve symlinks confined to a trusted root. An attacker who ca...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs — это легковесный и самостоятельно размещаемый Git-сервис, аналогичный приватной версии GitHub, предназначенный для простого запуска на серверах с низкими ресурсами. Уязвимость CVE-2025-8110 — это критическая ошибка безопасности, которая позволяет атакующему обойти...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Доказательство концепции для CVE-2025-8110 — удалённое выполнение кода в Gogs через обход символической ссылки и внедрение sshCommand. Описание Этот эксплойт использует обход символической ссылки в API Gogs, чтобы перезаписать .git/config и внедрить вредоносный...

CVE-2026-62384

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...

CVE-2026-62384 NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...

CVE-2026-62384 NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...

EUVD-2026-64338

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...

CVE-2026-62384

NLTK (Python Natural Language Toolkit) versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader . An attacker who can place symlinks with names containing no path separators inside a corpus subdirectory can bypass the path validation guard and read arbitrary XML files...

Linux Distros Unpatched Vulnerability : CVE-2026-62384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus...

CentOS 9 : python3.9-3.9.25-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.9-3.9.25-10.el9 build changelog. - tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

CVE-2026-19429

A flaw was found in Jenkins. An authenticated remote attacker with low privileges could exploit an incomplete patch related to symlink validation during tar archive extraction. This vulnerability allows the attacker to bypass symlink target validation, enabling them to read arbitrary files on the...

CVE-2026-11940

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

Directory Traversal

Overview unearth is an A utility to fetch and download python packages Affected versions of this package are vulnerable to Directory Traversal through the iswithindirectory check in untararchive and iswithindirectory in unearth’s tar extraction code. An attacker can write files outside the intend...

EUVD-2026-55802

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the iswithindirectory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply malicious tar archives with symlink membe...