AWS-SAM-CLI-Vulnerabilities

Vulnerabilidades de AWS SAM CLI CVE-2025-3047 y CVE-2025-3048 Este README proporciona un análisis detallado de dos vulnerabilidades de seguridad encontradas en la Interfaz de Línea de Comandos del Modelo de Aplicaciones Serverless de AWS AWS SAM CLI – CVE-2025-3047 y CVE-2025-3048 – junto con los...

rcetest

CVE-2024-32002：通过 git clone 利用 Git RCE 此仓库包含一个针对 CVE-2024-32002 的 PoC，该漏洞允许在 git clone 操作期间实现远程代码执行（RCE）。通过以特定方式构造包含子模块的仓库，攻击者可以利用不区分大小写的文件系统上的符号链接处理，将文件写入 .git/ 目录，从而执行恶意钩子。 注意： 此 PoC 仅适用于 Windows 或 Mac 系统。 博客文章 关于此漏洞逆向工程的详细解释，请参阅博客文章：https://amalmurali.me/posts/git-rce。 工作原理 1...

CVE-2025-8110

CVE-2025-8110 — PoC de RCE en Gogs Silentium / HackTheBox Descargo de responsabilidad: Esta herramienta está destinada estrictamente a fines educativos y pruebas de penetración autorizadas. Úsela únicamente contra sistemas para los que tenga permiso explícito. Esta es una versión modificada de...

Safenet_SAC_CVE-2021-42056

Safenet Authentication Client Privilege Escalation CVE-2021-42056 Según el sitio web de Thales 1, SafeNet Authentication Client es un cliente de middleware que gestiona la amplia cartera de autenticadores basados en certificados de Thales, incluyendo eTokens, tarjetas inteligentes SafeNet IDPrime...

CVE-2025-48384

Resumen de CVE-2025-48384 CVE-2025-48384 es una vulnerabilidad crítica en Git, el sistema de control de versiones distribuido más utilizado. Implica un manejo inadecuado de los caracteres de retorno de carro CR en los valores de configuración, lo que puede provocar problemas de path traversal...

Links.a

CVE-2023-44962 PoC para CVE-2023-44962 Análisis La subida de archivos comprimidos que contienen enlaces simbólicos en upload-cover-image.pl puede filtrar parte del contenido de los archivos enlazados. root@kitploit: ... foreach my $dir @directories my $file; if -e "$dir/idlink.txt" $file =...

CVE-2025-8110

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de Uso Educativo Este repositorio contiene un script de prueba de concepto PoC en Python para demostrar y analizar la vulnerabilidad registrada como CVE-2025-8110 en el servicio de Git auto-alojado Gogs versiones 0.13.3 y anteriores. ⚠️...

Linux Distros Unpatched Vulnerability : CVE-2026-89699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a clien...

PT-2026-90721

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories e.g., /var/cache, /var/dat...

CVE-2026-89699

A flaw was found in the Linux kernel's Network File System Daemon nfsd when handling NFSv4 CREATE operations. A remote attacker can exploit this by sending a crafted request with an oversized symbolic link symlink target length. This unbounded length can force the kernel to allocate a large amoun...

AZL-100310 CVE-2026-89699 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a client to force a kmalloc of up to the maximum RPC payload size several Mi...

DEBIAN-CVE-2026-89699

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a client to force a kmalloc of up to the maximum RPC payload size several Mi...

CVE-2026-89699

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a client to force a kmalloc of up to the maximum RPC payload size several Mi...

CVE-2024-32002-poc

Bash 脚本： root@kitploit: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale"...

CVE-2026-89699

CVE-2026-89699 is a denial-of-service vulnerability in the Linux kernel's nfsd (Network File System Daemon). The function nfsd4_decode_create() accepts an unbounded cr_datalen from the wire for NFSv4 symlink targets, allowing a remote, unauthenticated attacker to force a kmalloc of up to several ...

EUVD-2026-76611

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a client to force a kmalloc of up to the maximum RPC payload size several Mi...

CVE-2026-89699 nfsd: validate symlink target length in NFSv4 CREATE

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a client to force a kmalloc of up to the maximum RPC payload size several Mi...

CVE-2026-89699

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded crdatalen from the wire for NF4LNK symlink targets, allowing a client to force a kmalloc of up to the maximum RPC payload size several Mi...

CVE-2026-17106

CVE-2026-17106 — CopyEscape: escritura arbitraria de archivos de contenedor a host mediante docker cp Imagen de distribución de HackSpeak. Este repositorio es un espejo de distribución del PoC CopyEscape CVE-2026-17106 publicado por el equipo rojo de Imperva Ron Masas ; el código es idéntico al...

PSF-2026-40

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...