CVE-2021-32804

CVE-2021-32804 yamory blog 「CVE-2021-32804: vulnerabilità di path traversal in node-tar che colpisce anche npm」 で利用したDocker環境の構築を行うためのレポジトリです。 Configurazione dell'ambiente root@kitploit: docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Riproduzione della vulnerabilità...

CVE-2007-4559

PoC o Exploit per CVE-2007-4559 Un archivio TAR malevolo può includere percorsi di file come ../../../../etc/passwd, che tentano di "salire" fuori dalla cartella di estrazione prevista. Se uno script Python usa tarfile.extract o extractall senza controllare i percorsi dei file, decomprimerà i fil...

CVE-2026-44402

CVE-2026-44402 Esecuzione Remota Completa di Comandi senza autenticazione in Voltronic Power SNMP Web Pro 1.1 Contenuto Vendor interessato: https://voltronicpower.com/ Prodotto interessato: SNMP Web pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilità di esecuzione remota di codice non autenticata...

wargame-tarpioka

BubbleTea CVE-2007-4559 Vulnerabilità di directory traversal tramite “.tar” per accedere a ../../flag percorso root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Istruzioni di build correnti verifica docker docker ps...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

ROOT-OS-DEBIAN-12-CVE-2026-5704 CVE-2026-5704 in tar - Patched by Root

Root has patched CVE-2026-5704 in the tar package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-79655

A path traversal flaw in the sos clean utility (part of the sos package) allows a local attacker to perform arbitrary file creation or overwrite . The root cause is improper validation of symlink and hardlink targets during tar archive extraction. A specially crafted tar archive can cause files t...

CVE-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

EUVD-2026-65492

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2025-59284-PoC

CVE-2025-59284-PoC Prova de conceito para o exploit CVE-2025-59284 no libarchive uso: root@kitploit: Usage: Poc.py exemplo python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Artigo técnico: https://sec-fault.com/blog/cve-2025-59284/ Vídeo...

Linux Distros Unpatched Vulnerability : CVE-2026-79655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By...

CopyEscape-CVE-2026-17106

CopyEscape: Übernahme von Docker-Hosts mit docker cp CVE-2026-17106 Dies ist das Proof-of-Concept-Repository zum Blogbeitrag CopyEscape: Übernahme von Docker-Hosts mitdocker cp — CVE-2026-17106. CopyEscape ermöglicht es einem bösartigen laufenden Container, den Archiv-Erzeuger von Docker in einem...

ROOT-OS-DEBIAN-13-CVE-2026-5704 CVE-2026-5704 in tar - Patched by Root

Root has patched CVE-2026-5704 in the tar package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2005-2541 CVE-2005-2541 in tar - Patched by Root

Root has patched CVE-2005-2541 in the tar package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-43637-cornac

CVE-2026-43637: Path Traversal Tar Slip in Cornac tramite extractarchive Gravità: Alta, CVSS 4.0 8.8 , Critica, CVSS 3.1 9.1assegnato da VulnCheck, il CNA Vettore v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vettore v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H...

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

EUVD-2026-64885

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...