1783 matches found
security-research
Investigación de Seguridad Una colección de archivos relacionados con mi investigación personal de seguridad. Contenido adicional se publicará en mi blog https://blog.mirch.io. Herramientas Herramienta| Descripción ---|--- openssldircheck| Utilidad de Windows para comprobar rutas potencialmente...
CVE-2019-1476
CVE-2019-1476 AppXSvc – DoS durch Überschreiben beliebiger Dateien Ich habe diese Sicherheitslücke unabhängig gegenüber MSRC gemeldet, im Rahmen meiner Forschung inspiriert von CVE-2019-0841, ursprünglich gemeldet von Nabeel Ahmed. Diese Sicherheitslücke ermöglicht einem normalen Benutzer,...
CVE-2022-43293
CVE-2022-43293 漏洞利用 要实现持续的 Windows 拒绝服务（如上 POC 所示），只需运行 Exploit.bat，并在提示要覆盖哪个文件时输入 %windir%\system32\cng.sys。 这里可以找到我的任意文件写入/覆盖漏洞 报告。 这里可以了解如何利用任意文件写入/覆盖 原语来 实现Windows 拒绝服务 。 这里可以请我喝杯独角兽 🦄 分享知识！...
CVE-2026-23745
CVE-2026-23745: Sobrescritura Arbitraria de Archivos en node-tar Investigación: Joshua van Rijswijk Descripción PoC para CVE-2026-23745 , una vulnerabilidad de traversal de rutas de alta severidad en node-tar 7.5.2. La librería no sanitiza rutas absolutas en el campo linkpath para Hardlinks y...
CVE-2026-21436
CVE-2026-21436 eopkg = 4.3.4, el gestor de paquetes de Solus OS, escribe directamente en el directorio especificado los archivos que contienen rutas absolutas dentro del contenido del paquete durante la instalación de paquetes con extensión .eopkg. Incluso si se utiliza el parámetro --destdir,...
CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
CVE-2024-37726 MSI Center स्थानीय विशेषाधिकार वृद्धि - मनमानी फ़ाइल अधिलेखन भेद्यता।...
Cve-2025-8088-WinRar-vulnerability
Cve-2025-8088 WinRAR Python में बना एक उपकरण जो CVE-2025-8088 भेद्यता का शोषण करने के लिए एक दुर्भावनापूर्ण RAR फ़ाइल बनाता है। CVE-2025-8088 भेद्यता WinRAR में हेरफेर की गई RAR फ़ाइलों के माध्यम से path traversal और पीड़ित के सिस्टम पर मनमानी फ़ाइलों को अधिलेखित करने की अनुमति देती है। यह परियोज...
CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
CVE-2024-37726 MSI Center Escalação de Privilégio Local - Vulnerabilidade de Sobrescrita Arbitrária de Arquivos Resumo da Vulnerabilidade Uma vulnerabilidade de escalação de privilégio local no sistema operacional Windows foi identificada nas versões = 2.0.36.0 do MSI Center, que permite a um...
CVE-2026-59682 Arbitrary file overwrite and deletion local and remote in OpenRGB
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
CVE-2026-59682
OpenRGB through 1.0rc3 is affected by an arbitrary file overwrite and deletion vulnerability via the SAVE_PROFILE message, allowing both local and remote exploitation. Per CVSS 3.1, this is rated CRITICAL (9.1) with a network attack vector requiring no privileges and no user interaction , resulti...
EUVD-2026-66380
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
CVE-2026-79655
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...
CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile
Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...
gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding
A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...
gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding
A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...
CVE-2026-77679
A path traversal ZIP slip vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, the decompressxpithread function extracts XPI archives ZIP format to disk using libarchive. For each archive entry, the output path i...
Dirty-Pipe-CVE-2022-0847
Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe ist eine Schwachstelle zum Überschreiben beliebiger Dateien, die eine Privilegienausweitung ermöglicht, indem beliebige schreibgeschützte Dateien wie /etc/passwd, /etc/shadow geändert oder überschrieben werden. Schritte 1. Kompilieren mit gcc...
CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction
adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...