NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc db...

RegPwnBOF

RegPwn BOF Adaptación BOF de Cobalt Strike del exploit RegPwn por Filip Dragovic @Wh04m1001 / MDSec ActiveBreach. Esta es una reimplementación BOF descuidada del exploit original en C. Todo el crédito por la investigación de la vulnerabilidad y el exploit pertenece a Filip Dragovic y MDSec...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Resumen ejecutivo macOS Music y TV realizan un cambio de nombre inseguro que resulta en FDA al obtener control total sobre el TCC.db del usuario Reporté este error en tickets separados para cada aplicación, no dudes en fusionarlos si corresponde. El problema subyacente es que estas aplicaciones...

below-log-race-poc

below-log-race-poc Exploit CVE-2025-27591 Escalada de privilegios de below Descripción Este repositorio contiene una prueba de concepto PoC para CVE-2025-27591 , una vulnerabilidad de escalada de privilegios en la utilidad below. El problema surge porque below maneja incorrectamente los archivos ...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

RegPwnBRc4BOF

RegPwn BOF for Brute Ratel C4 My Brute Ratel C4 BOF reimplementation of port of the RegPwn exploit by Filip Dragovic @Wh04m1001 / MDSec ActiveBreach. This is a sloppier BRc4 BOF reimplementation of the Flangvik's CS BOF reimplementation of the original C exploit. All credit still goes for the...

Linux Distros Unpatched Vulnerability : CVE-2026-86422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or wri...

CVE-2026-86424

A flaw was found in ImageMagick. This time-of-check-time-of-use TOCTOU vulnerability, involving a symlink race in the video decoder, allows a local attacker with low privileges to bypass path policy write restrictions. By replacing a symbolic link between the security check and the actual file...

CVE-2026-5061

CVE-2026-5061 Consul Template validaba a dónde apuntaba un enlace simbólico durante la evaluación de la plantilla, pero su posterior obtención de dependencias leía la ruta original. Reorientar el enlace entre esas operaciones convertía una referencia a un archivo dentro del sandbox en una...

CVE-2026-86469 Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

CVE-2026-53801

A symlink race condition in rsync's sender directory scanning logic allows a local attacker to bypass intended access restrictions. By replacing a symlink with a directory entry pointing outside the module root during an active scan, the attacker can force rsync to enumerate and transfer...

CVE-2026-53797

A symlink race condition in rsync's source tree traversal allows a low-privileged local attacker to access unauthorized files. By atomically replacing a parent directory component with a symlink during an active transfer, the attacker can redirect file reads outside the intended transfer root,...

CVE-2026-86422

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86424 ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps. An attacker can replace a symlink between policy validation check-time and the file write...

CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

EUVD-2026-72380

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422

ImageMagick versions before 7.1.2-30 are affected by a time-of-check-time-of-use (TOCTOU) vulnerability in its path policy enforcement mechanism on Windows . An attacker with local access and low privileges can exploit symlink race conditions by swapping symlinks between policy validation and act...

CVE-2026-53799

A symlink race condition in rsync allows a local attacker to achieve privilege escalation. By substituting a symlink at a predictable destination path between a file write and the application of access control lists ACLs or extended attributes xattrs, an attacker can redirect these permissions to...

PT-2026-86788

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...