CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp 컨테이너에서 호스트로의 임의 파일 쓰기 HackSpeak 배포 이미지입니다. 이 저장소는 Imperva 레드팀Ron Masas이 공개한 CopyEscape PoCCVE-2026-17106의 배포 이미지 이며, 코드는 업스트림과 일치합니다. 업스트림에 LICENSE가 포함되어 있지 않아 배포 관례에 따라 MIT License, Copyright c 2026 HackSpeak 를 적용하며, 소스 코드의 저작권은 원저작자에게 있습니다. ⚠️ 보안 연구 및 승인된 테스...

two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

CVE-2026-18907 — TECNO Hi Browser 다운로드 처리기의 경로 탐색Path Traversal CVE-2026-18907CVSS 7.5 High, CWE-23에 대한 개념 증명PoC으로, TECNO Hi Browsercom.talpa.hibrowser 버전 2.23.1.1 의 다운로드 파일 기능 에 존재하는 상대 경로 탐색 취약점입니다. 이 브라우저는 공격자가 제어하는 Content-Disposition 파일명을 신뢰하여, 경로 구분자를 정화하거나 결과의 정규 경로를 검사하지 않고 다운로드 디렉터리에 그대로...

CopyEscape-CVE-2026-17106

CopyEscape: docker cp로 Docker 호스트 장악하기 CVE-2026-17106 이 저장소는 블로그 게시물 CopyEscape:docker cp로 Docker 호스트 장악하기 — CVE-2026-17106에 대한 개념 증명PoC 저장소입니다. CopyEscape를 사용하면 악성 실행 컨테이너가 Docker의 아카이브 생성 프로세스와 경쟁하여 일관되지 않은 tar 스트림을 만들 수 있습니다. 취약한 Docker CLI는 추출 중에 심어진 심볼릭 링크를 따라가 docker cp를 실행하는 사용자가 선택한 로컬 대상...

CVE-2025-7401

CVE-2025-7401 Premium Age Verification / Restriction for WordPress ' 🧭 コマンドラインオプション 📋 スクリプトの詳細な動作（ステップバイステップ） 📌 期待される出力とその意味 🛡️ 緩和策と推奨事項 プラグインをベンダー提供のパッチ適用済みバージョンへ直ちにアップグレードしてください。 リモートサポート機能へのアクセスを、認証と適切な承認チェックで制限してください。 サーバー側で、ユーザーが指定するすべてのファイルパスとファイル内容をサニタイズし、検証してください。...

CVE-2026-89009

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the syncserver daemon on TCP port 13136. The daemon, which runs...

CVE-2026-87984

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...

EUVD-2026-76129

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the syncserver daemon on TCP port 13136. The daemon, which runs...

CVE-2026-89009 WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the syncserver daemon on TCP port 13136. The daemon, which runs...

CVE-2026-89009

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 are affected by an unauthenticated arbitrary file write vulnerability in the sync_server daemon listening on TCP port 13136 . The daemon runs as root without authentication and accepts a 100-byte filename field in its pro...

EUVD-2026-76119

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...

CVE-2026-87984

Mistral Vibe , introduced in version 1.3.4 , contains an arbitrary file write vulnerability. The root cause is that shell redirection destinations are omitted from permission checks , allowing otherwise allowlisted commands to create or overwrite files at arbitrary paths accessible to the Vibe pr...

CVE-2026-87984

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...

CVE-2026-82583 NextGen Healthcare Mirth Connect SQL Injection

NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition...

EUVD-2026-76115

NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition...

CVE-2026-88014

A flaw was found in rclone. This vulnerability, known as Zip Slip, allows a remote attacker to write arbitrary files outside of the intended destination when processing a specially crafted ZIP archive. By manipulating archive entry names, an attacker can bypass path sanitization, leading to...

EUVD-2026-75760

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...

PT-2026-89886

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...

PT-2026-89804

Patch CVE-2026-16338 immediately. Learn how this 9.9 CVSS flaw allows arbitrary file write attacks in IBM DataStage and how to secure your data today. CVE202616338 IBMDataStage CyberSecurity InfoSec ArbitraryFileWrite CloudSecurity Vulnerability https://t.co/k9OgrO33Vv https://t.co/lVFSA4z6H7...

PT-2026-90513

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-49836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path...