774 matches found
CVE-2024-0406-POC
CVE-2024-0406 Prova de Conceito PoC Este repositório contém um exploit de Prova de Conceito PoC para CVE-2024-0406 , uma vulnerabilidade envolvendo extração de arquivos tar baseada em symlinks que permite travessia de caminho ou sobrescrita de arquivos em sistemas afetados. Mais detalhes em...
PoC-for-CVE-2020-28948-CVE-2020-28949
CVE-2020-28948 与 CVE-2020-28949 的 PoC 此处的文件包含可实现远程利用的 CVE-2020-28948 与 CVE-2020-28949 的 PoC 服务端 server 文件夹包含一个简单的上传服务端，它使用了存在漏洞的 ArchiveTar 库，该库位于 server/Archive 中。服务端接收用户上传的 Tar 归档文件，将其解压并存放到 server/uploads/ 文件夹中。 使用存在漏洞的库启动服务端： root@kitploit: cd server make build make start 使用已修复的库启动服务端：...
CVE-2026-44402
CVE-2026-44402 Esecuzione Remota Completa di Comandi senza autenticazione in Voltronic Power SNMP Web Pro 1.1 Contenuto Vendor interessato: https://voltronicpower.com/ Prodotto interessato: SNMP Web pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilità di esecuzione remota di codice non autenticata...
wargame-tarpioka
BubbleTea CVE-2007-4559 Vulnerabilità di directory traversal tramite “.tar” per accedere a ../../flag percorso root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Istruzioni di build correnti verifica docker docker ps...
CVE-2025-59284-PoC
CVE-2025-59284-PoC Prova de conceito para o exploit CVE-2025-59284 no libarchive uso: root@kitploit: Usage: Poc.py exemplo python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Artigo técnico: https://sec-fault.com/blog/cve-2025-59284/ Vídeo...
CVE-2026-44517
Buildah (OCI image building tool) versions 1.38.1 through 1.43.2 and 1.44.0 are vulnerable to a build context breakout . The root cause is that TempDirForURL in define/types.go fails to securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory/stdinTo...
CVE-2026-44517
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...
CVE-2026-44517
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...
CVE-2026-44517 Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...
CVE-2026-44517 Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...
tar: Node-tar: Denial of Service via malformed tar archive header
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...
CVE-2026-5704 vulnerabilities
Vulnerabilities for packages: gnutar...
CVE-2026-71477
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a...
CVE-2026-71477 mise: Incorrect file ownership, when installed by the root user using `install.sh`
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a...
CVE-2026-71477
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a...
CVE-2026-74764
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...
CVE-2026-74764 Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...
CVE-2026-63308 vulnerabilities
Vulnerabilities for packages: helm...