510 matches found
npm-tar-path-traversal-scanner
CVE-2026-31802 — npm tar Pfad-Traversal-Scanner Erkennt npm-Pakete, die für CVE-2026-31802 anfällig sind, eine Pfad-Traversal-Schwachstelle im npm-Paket tar, die beliebige Dateischreibvorgänge während der Archiv-Extraktion ermöglicht. Funktionen Scannt package-lock.json nach anfälligen...
NodeJS-Tar-Symlink-Exploit-CVE-2026-29786
📦 CVE-2026-29786: Vulnerabilità Symlink in Tar di Node.js -yellow 📌 Riepilogo Esecutivo Questo repository documenta la ricerca su CVE-2026-29786 , una vulnerabilità ad alta gravità scoperta nel popolare pacchetto tar di Node.js. Il difetto consente a un attaccante di creare un archivio tar dannos...
POC-CopyEscape-CVE-2026-17106
CopyEscape — PoC di CVE-2026-17106 Proof of Concept educativa di CopyEscape CVE-2026-17106, vulnerabilità di race condition TOCTOU in docker cp che consente a un container dannoso di scrivere file arbitrari sull'host Docker. Ispirata al lavoro originale di masasron , che ha scoperto e documentato...
Tarmageddon-CVE-2025-62518-
Tarmageddon CVE-2025-62518 동영상: https://youtu.be/EYBB4BHsp9E 저장소 디렉터리 vulnerable-extract 최소 재현 예제, 경로를 인수로 받아 해당 파일을 ./output에 추출합니다. malicious-payload 간단한 malicious.tar 아카이브를 생성하며, 밀반입된 콘텐츠의 예시를 포함합니다. 주석은 단계별 및 블록별로 수행되는 작업을 설명합니다. 재현 제공된 재현 스크립트를 사용하거나 수동으로 수행하세요. malicious-payload를 실행하여 페이로드...
CVE-2025-4517-PoC
CVE-2025-4517-PoC CVE-2025-4517 è una vulnerabilità nel modulo tarfile di Python che consente scritture arbitrarie di file al di fuori della directory di estrazione quando si estraggono archivi tar non attendibili. Il problema si verifica quando si utilizza TarFile.extract o TarFile.extractall co...
CVE-2026-79655
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
CVE-2026-79655
A path traversal flaw in the sos clean utility (part of the sos package) allows a local attacker to perform arbitrary file creation or overwrite . The root cause is improper validation of symlink and hardlink targets during tar archive extraction. A specially crafted tar archive can cause files t...
CVE-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
EUVD-2026-65492
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
CVE-2026-79655
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
Linux Distros Unpatched Vulnerability : CVE-2026-79655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By...
CopyEscape-CVE-2026-17106
CopyEscape: Übernahme von Docker-Hosts mit docker cp CVE-2026-17106 Dies ist das Proof-of-Concept-Repository zum Blogbeitrag CopyEscape: Übernahme von Docker-Hosts mitdocker cp — CVE-2026-17106. CopyEscape ermöglicht es einem bösartigen laufenden Container, den Archiv-Erzeuger von Docker in einem...
BIT-DOCKER-CLI-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
CVE-2026-64824-PoC
CVE-2026-64824 — Home Assistant Core Backup-Restore: Symlink Path Traversal → RCE CVSS 8.4 Critico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 In breve Un attaccante autenticato admin carica un tar di backup appositamente modificato. Il percorso di ripristino estrae il homeassistant.tar.gz interno co...
PT-2026-79855
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21611-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21611-1 advisory. Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine...
Security update for apptainer (important)
openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21611-1 Rating: important References: bsc1275248 Cross-References: CVE-2026-17106 CVSS scores: CVE-2026-17106 SUSE : 7.1...
CVE-2026-44517
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...
Velero vulnerable to file path traversal when extracting from backup's tarball
Impact What kind of vulnerability is it? Who is impacted? If the attacker compromises the backup's object storage backend and uploads a malicious backup tarball including file names like the following: ../../../tmp/escape1 - file created at /tmp/escape1 ../../../../../../../../tmp/escape2 - file...
