19290 matches found
AlmaLinux 8 : mrtg (ALSA-2026:65832)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:65832 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-87766
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot,...
TencentOS Server 4: libvirt (TSSA-2026:0978)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0978 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
EUVD-2026-74594
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
TencentOS Server 4: attr (TSSA-2026:0984)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0984 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
RHEL 8 : mrtg (RHSA-2026:65832)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:65832 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provid...
Important: mrtg security update
The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
mrtg security update
2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037...
Linux Distros Unpatched Vulnerability : CVE-2026-86422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or wri...
ALSA-2026:65832 Important: mrtg security update
The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...
docker-cve-2022-39253-poc
docker host file read using cve-2022-39253 poc PoC 复现环境 root@kitploit: $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starting ... ... Ubuntu...
CVE-2026-87051
A flaw was found in operator-foundry. The path-containment check, designed to restrict file access within a build context, only performs string-based validation. It fails to resolve symbolic links symlinks, allowing an attacker to create a symlink within the build context that points to files or...
CVE-2026-86424
A flaw was found in ImageMagick. This time-of-check-time-of-use TOCTOU vulnerability, involving a symlink race in the video decoder, allows a local attacker with low privileges to bypass path policy write restrictions. By replacing a symbolic link between the security check and the actual file...
CVE-2026-86422
A flaw was found in ImageMagick. This vulnerability, known as a time-of-check-time-of-use TOCTOU flaw, affects path policy enforcement on Windows. A local attacker can exploit this by manipulating symbolic links symlinks during the brief interval between when the system checks a file's permission...
cve-2022-21658
CVE-2022-21658 poc 请确保使用 Rust 1.58.0 版本 。 首先运行： root@kitploit: while :; do mkdir /tmp/legit; rm -r /tmp/legit; ln -s /tmp/sensitive /tmp/legit; done 然后： root@kitploit: cargo run...
CVE-2020-23968-ILEX-SignGo-EoP
CVE-2020-23968 Ilex International Sign&go Workstation Security Suite 7.1 允许通过针对 C:\ProgramData\Ilex\S&G\Logs\000-sngWSService1.log 的符号链接攻击提升权限。...
GHSA-MMG6-4QMV-6PC8 Infracost: Arbitrary file read via config-template readFile symlink traversal
Impact Path traversal via link following in the Infracost config-template parser. The readFile, pathExists, isDir, and matchPaths template functions confined repo-supplied paths with a lexical filepath.Rel check plus a leaf-only os.Lstat: readFile "evil/file" With an intermediate directory symlin...