Cve-2025-8088-WinRar-vulnerability

Cve-2025-8088 WinRAR Herramienta en Python que crea un archivo RAR malicioso para explotar la vulnerabilidad CVE-2025-8088 en WinRAR. La vulnerabilidad CVE-2025-8088 permite la explotación de archivos RAR manipulados para provocar path traversal y sobrescribir archivos arbitrarios en el sistema d...

CVE-2019-1476

CVE-2019-1476 DoS por sobrescritura arbitraria de archivos en AppXSvc Informé de esta vulnerabilidad de forma independiente a MSRC como parte de mi investigación inspirada en CVE-2019-0841, reportada originalmente por Nabeel Ahmed. Esta vulnerabilidad permite a un usuario normal sobrescribir...

EUVD-2026-95346

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-21436

CVE-2026-21436 eopkg = 4.3.4, el gestor de paquetes de Solus OS, escribe directamente en el directorio especificado los archivos que contienen rutas absolutas dentro del contenido del paquete durante la instalación de paquetes con extensión .eopkg. Incluso si se utiliza el parámetro --destdir,...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-23745

CVE-2026-23745: Sobrescritura Arbitraria de Archivos en node-tar Investigación: Joshua van Rijswijk Descripción PoC para CVE-2026-23745 , una vulnerabilidad de traversal de rutas de alta severidad en node-tar 7.5.2. La librería no sanitiza rutas absolutas en el campo linkpath para Hardlinks y...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3 . The issue is located in lib/decompress-zip.js, where the software improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive with entries resolving to prefix-sibling directories can ca...

EUVD-2026-95103

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

security-research

Investigación de Seguridad Una colección de archivos relacionados con mi investigación personal de seguridad. Contenido adicional se publicará en mi blog https://blog.mirch.io. Herramientas Herramienta| Descripción ---|--- openssldircheck| Utilidad de Windows para comprobar rutas potencialmente...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 Escalada de Privilegios Local en MSI Center – Vulnerabilidad de Sobrescritura Arbitraria de Archivos Resumen de la Vulnerabilidad Se ha identificado una vulnerabilidad de escalada de privilegios local en sistemas Windows en versiones de MSI Center = 2.0.36.0, que permite a un usuar...

CVE-2026-77621

A flaw was found in Vector. A path traversal vulnerability in the file sink may allow a remote attacker who controls event fields referenced in the output path template to create or overwrite arbitrary files with the privileges of the Vector process. Depending on the files affected, this may resu...

openssh: OpenSSH: sftp client allows attacker to control downloaded file location

A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...

CVE-2026-63266

A flaw was found in LibreOffice. When processing a spreadsheet with a cell range linked to an external data source, LibreOffice Calc can load an embedded Firebird database that writes files outside its intended directory. By convincing a user to open a specially crafted document, an attacker coul...

Dirty-Pipe-CVE-2022-0847

Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe es una vulnerabilidad de sobrescritura arbitraria de archivos que permite la escalada de privilegios mediante la modificación o sobrescritura de archivos arbitrarios de solo lectura, p. ej., /etc/passwd, /etc/shadow. Pasos 1. Compilar usando gcc...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Escalada de Privilegios Local - Vulnerabilidad de Sobrescritura Arbitraria de Archivos...

CVE-2022-43293

Exploits para CVE-2022-43293 Para lograr una Denegación de Servicio persistente de Windows como se muestra en el POC anterior, simplemente ejecute Exploit.bat e ingrese %windir%\system32\cng.sys cuando se le pregunte qué archivo desea sobrescribir. Aquí puede encontrar mi informe de Vulnerabilida...

gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding

A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...

gitpython: GitPython: Arbitrary File Overwrite via improper git option validation

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the Diffable.diff method, an attacker can supply a malicious output argument to write patch content to attacker-controlled...