cve-2021-42013

Apache 2.4.50 - 경로 탐색 또는 원격 코드 실행 cve-2021-42013.py는 Apache 2.4.50에서 경로 탐색 또는 원격 코드 실행 취약점을 찾는 데 도움이 되는 Python 스크립트입니다. CVE-2021-42013을 실습할 수 있도록 취약한 Docker 인스턴스가 제공됩니다. CGI-BIN이 활성화된 경우, 경로 탐색이 아닌 원격 코드 실행을 수행할 수 있습니다. 따라서 httpd.conf의 Alias 섹션에 "icons" 디렉터리를 추가하여 경로 탐색 취약점을 확인합니다. httpd.conf의 취약...

CVE-2026-94185

nvm resolves a requested version or alias by treating it as a filename under $NVMDIR/alias. Before 0.40.8, nvmalias concatenated the requested name onto that directory and read the result with no containment check, so a name containing a .. component escaped the alias directory; under the default...

CVE-2026-15921 nvm path traversal via a malicious mirror's LTS codename writes outside the alias directory

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.32.1 through 0.40.5, nvm ls-remote and other commands that refresh remote LTS aliases, such as nvm install --lts parse the node.js mirror's index.tab and use each release's LTS...

CVE-2026-15921 nvm path traversal via a malicious mirror's LTS codename writes outside the alias directory

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.32.1 through 0.40.5, nvm ls-remote and other commands that refresh remote LTS aliases, such as nvm install --lts parse the node.js mirror's index.tab and use each release's LTS...

CVE-2026-15921

The CVE-2026-15921 issue affects Node Version Manager (nvm) up to v0.40.5, where nvm ls-remote and similar commands parse the mirror index.tab and use each LTS codename as an alias filename without validation. A malicious mirror can return path-traversal codenames (e.g., ../../../.bashrc), causin...

UBUNTU-CVE-2026-43470

In the Linux kernel, the following vulnerability has been resolved: nfs: return EISDIR on nfs3proccreate if dalias is a dir If we found an alias through nfs3docreate/nfsaddorobtain /dsplicealias which happens to be a dir dentry, we don't return any error, and simply forget about this alias, but t...