wargame-tarpioka

BubbleTea CVE-2007-4559 「.tar」を使用したディレクトリトラバーサル脆弱性により../../flag path root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py 現在のビルド手順 dockerの確認 docker ps docker images docker build -t tarpioka docker run -d -it --name...

CVE-2024-0406-POC

CVE-2024-0406 Proof of Concept（PoC） このリポジトリには、CVE-2024-0406 の Proof of Concept（PoC）エクスプロイトが含まれています。これは、シンボリックリンクベースの tar アーカイブ展開に関連する脆弱性であり、影響を受けるシステム上でパストラバーサルやファイルの上書きを可能にします。 詳細は Path Traversal in mholt/archiver を参照してください。 脆弱性の詳細 CVE ID: CVE-2024-0406 説明: tar...

EUVD-2025-210915

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

CVE-2025-11395 Podman: arbitrary file write when importing oci archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

DEBIAN-CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

EUVD-2026-78824

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

CVE-2026-79699

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header e.g. victim/.wh. can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or...

EUVD-2026-78823

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not...

CVE-2026-79705

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not...

CVE-2025-59284-PoC

CVE-2025-59284 の PoC CVE-2025-59284 libarchive エクスプロイトの概念実証 使用方法： root@kitploit: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar 技術解説： https://sec-fault.com/blog/cve-2025-59284/ 動画...

PT-2026-93217

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

Linux Distros Unpatched Vulnerability : CVE-2025-11395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the...

PoC-for-CVE-2020-28948-CVE-2020-28949

CVE-2020-28948 および CVE-2020-28949 の PoC ここにあるファイルは、リモートエクスプロイトを達成するための CVE-2020-28948 および CVE-2020-28949 の PoC を含みます。 サーバー server フォルダには、脆弱性のある ArchiveTar ライブラリを使用する簡単なアップロードサーバーが含まれており、server/Archive に配置されています。このサーバーはユーザーから Tar アーカイブを受け取り、展開して server/uploads/ フォルダに保存します。 脆弱性のあるライブラリでサーバーを起動するには:...

CVE-2026-44402

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 存在无需认证的完全远程命令执行漏洞 内容 受影响厂商：https://voltronicpower.com/ 受影响产品：SNMP Web pro 1.1 SNMP Web Pro 1.1 的 upload.cgi 端点存在一个未经认证的远程代码执行漏洞。固件更新功能允许用户上传 tar 归档文件，随后该文件会在没有任何输入验证或安全检查的情况下被解压并安装。应用未能限制或清理归档内容，因此攻击者可以上传包含恶意 CGI...

UBUNTU-CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

ROOT-APP-NPM-CVE-2026-59875 CVE-2026-59875 in tar - Patched by Root

Root has patched CVE-2026-59875 in the tar package for Root:npm. Multiple fixed versions available...

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...