CVE-2025-8110

CVE-2025-8110 — Gogs सिमलिंक ट्रैवर्सल → RCE अवलोकन CVE-2025-8110 Gogs स्व-होस्टेड Git सेवा संस्करणों = 0.13.3 में एक महत्वपूर्ण कमजोरी है। PutContents API फ़ाइल पथों को डायरेक्टरी-ट्रैवर्सल ../ के लिए मान्य करती है, लेकिन लिखने से पहले सिम्बोलिक लिंक को नहीं हल करती है। एक प्रमाणित उपयोगकर्ता कि...

CVE-2026-81690 verify-usb before 1.4.9 Symlink Directory Traversal Code Execution

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

CVE-2026-81690

openssl-encrypt (pip package) versions before 1.4.9 contain a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The vulnerability arises because rglob() in CPython does not descend into symlinked directories, while O_NOFOLLOW on the hash side binds only the final path compone...

attr security update

An update is available for attr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The attr packages provide extended attributes, which can be used to store system...

RLSA-2026:60226 Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...

Se7enSlip

🔒 Se7enSlip - ماسح ثغرات 7-Zip تطبيق ويب تفاعلي ومذهل يوضح ويساعد في اكتشاف الثغرة الحرجة CVE-2023-52169 الخاصة بتجاوز الروابط الرمزية symlink traversal في أرشيفات 7-Zip. ⚡ الميزات 🎯 الوظائف الأساسية رفع وتحليل ZIP - اسحب وأفلت أو انقر لرفع ملفات ZIP لإجراء تحليل أمني شامل فحص في الوقت الفعلي -...

CVE-2025-68937

CVE-2025-68937 - RCE через симлинк в шаблонах Gitea/Forgejo Автоматизированный proof-of-concept для CVE-2025-68937 : обход каталога через разыменование симлинков при обработке шаблонных репозиториев Gitea и Forgejo, приводящий к удалённому выполнению кода. Любой аутентифицированный пользователь б...

CVE-2026-31802

CVE-2026-31802: tar Обход пути через символьные ссылки / произвольная перезапись файлов Исследование: Joshua van Rijswijk Описание Этот репозиторий содержит мой proof of concept и описание уязвимости CVE-2026-31802 — критической уязвимости в npm-пакете tar node-tar, затрагивающей версии = 7.5.10....

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit PoC d'écriture arbitraire de fichier via lien symbolique dans 7-Zip CVE-2025-55188 Description Cette preuve de concept démontre CVE-2025-55188 , une vulnérabilité dans les versions de 7-Zip antérieures à 25.01. La faille vient du fait que 7-Zip ne gère pas correctement l...

attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...

Moderate: Red Hat Security Advisory: attr security update

An update for attr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

RLSA-2026:59380 Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...

attr security update

An update is available for attr. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The attr packages provide extended attributes, which can be used to store syste...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 सिमलिंक ट्रैवर्सल के माध्यम से मनमानी फ़ाइल लेखन अवलोकन Gogs = 0.13.3 PutContents API /api/v1/repos/:owner/:repo/contents/:path के माध्यम से मनमानी फ़ाइल लेखन के लिए असुरक्षित है। API निर्देशिका-ट्रैवर्सल अनुक्रमों ../ के लिए फ़ाइल पथों को मान्य करता है, लेकिन लिखने ...

AlmaLinux 10 : attr (ALSA-2026:59380)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59380 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

attr security update

2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186121...

RockyLinux 10 : attr (RLSA-2026:59380)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59380 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : attr (ELSA-2026-59380)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59380 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128 Tenable has extracted...

RHEL 9 : attr (RHSA-2026:60226)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60226 advisory. The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, ...

Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...