CVE-2026-59292

CVE-2026-59292 affects Spring Integration , where the default file-based PropertiesPersistingMetadataStore persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions , allowing local users with high privileges to read metadata. The CVSS 3....

CVE-2014-5284

CVE-2014-5284 Implementazione Bash di CVE-2014-5284 Titolo Exploit: ossec 2.8 Vulnerabilità di Creazione di File Temporanei Non Sicuri - Privilege Escalation Python è carino ma non funziona sempre Autore Exploit: mbadanoiu Autore Exploit Python: skynet-13 Homepage del Fornitore: www.ossec.net/ Li...

CVE-2026-81572

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

EUVD-2026-66979

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

disclosures

Divulgazioni Questo è un repository che documenta problemi di sicurezza che ho incontrato. Il client Citrix per Linux espone le credenziali a syslog Creazione insicura di file ICA temporanei nel client Citrix per Linux CVE-2023-24486...

CVE-2026-30332

CVE-2026-30332 Beschreibung Eine Time-of-Check-to-Time-of-Use TOCTOU-Schwachstelle wurde in Balena Etcher für Windows in Versionen vor 2.1.4 identifiziert. Die Anwendung erstellt eine temporäre .cmd-Datei in einem benutzerbeschreibbaren Verzeichnis und führt diese später mit erhöhten Rechten über...

CVE-2025-25599

CVE-2025-25599 विवरण Bolt एक ओपन-सोर्स सामग्री प्रबंधन प्रणाली है जो Symfony PHP फ्रेमवर्क का उपयोग करके बनाई गई है। एक छोटे सुरक्षा मूल्यांकन के दौरान, Certitude ने कई कमजोरियों की पहचान की, जिसमें मनमाना फ़ाइल पढ़ना शामिल है। जिन उपयोगकर्ताओं के पास EDITOR , CHIEFEDITOR , ADMIN , या DEVELOPER...

CVE-2026-63404

Faktory is a language-agnostic background job server. In versions prior to 1.10.0 , its embedded Redis bootstrapper writes startup configuration to the fixed, world-writable path /tmp/redis.conf , creating the file only if absent and never validating it on subsequent boots. A local unprivileged u...

CVE-2026-75038

CVE-2026-75038 is a local denial-of-service vulnerability in LACT (ilya-zlobintsev/LACT), affecting versions through 0.10.0 . The root cause is a predictable temporary file created in /tmp , which an attacker can exploit via a UNIX symbolic link (symlink) following attack. The CVSS 3.1 score is 6...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2025-5880

Whistle 2.9.98 contiene una vulnerabilità di path traversal non corretta perché l'endpoint /cgi-bin/sessions/get-temp-file non riesce a sanificare adeguatamente l'input utente nel parametro filename. Fornendo percorsi assoluti o sequenze di traversal come /etc/passwd, un attaccante può bypassare ...

CVE-2026-59292

CVE-2026-59292...

cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack

A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...

CVE-2026-55086 Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...

CVE-2026-55086 Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...

CVE-2026-19474

The CVE-2026-19474 entry concerns @fastify/multipart, affecting versions 3.0.0 up to but not including 10.1.1. The root cause is that request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts; the iterato...

CVE-2026-18549 @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

PT-2026-73034

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...