CP-PLUS-EZ-P21-CVE-2026-65893-65894

🔐 Анализ безопасности IP-камеры CP PLUS EZ-P21 CVE-2026-65893 CVE-2026-65894 Произвольное выполнение кода и некорректная аутентификация – IP-камера CP PLUS EZ-P21 Обзор В этом репозитории задокументированы две уязвимости, обнаруженные в IP-камере CP PLUS EZ-P21 — IP-камере видеонаблюдения,...

CVE-2023-28467

MyBB 1.8.33 XSS persistante dans l'email du User CP - MyBB 1.8.33 XSS persistante dans l'email du User CP - Version MyBB "@cve.com Solution Mettez à niveau MyBB vers la version 1.8.34 ou supérieure...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC для CVE-2026-17106 Образовательный PoC для CopyEscape CVE-2026-17106, уязвимость состояния гонки TOCTOU в docker cp, которая позволяет вредоносному контейнеру записывать произвольные файлы на хост Docker. Вдохновлено оригинальной работой masasron , который обнаружил и...

CP Image Store with Slideshow <= 1.0.67 - SQL Injection

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the orderingby query parameter before using it in a SQL statement in pages where the codepeople-image-store is embed, allowing unauthenticated users to perform an SQL injection attack. id: CVE-2022-1692...

CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 Scripts d'aide PoC et Dockerfile pour CVE-2019-1002101 Pour des infos détaillées, allez sur https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ et...

CVE-2026-17106

CVE-2026-17106 — CopyEscape: произвольная запись файлов из контейнера на хост-машину через docker cp Распространяемое зеркало HackSpeak. Этот репозиторий является распространяемым зеркалом открытого PoC CopyEscape CVE-2026-17106 от Imperva Red Team Ron Masas , код идентичен оригиналу; оригинальны...

CopyEscape-CVE-2026-17106

CopyEscape: захват хостов Docker с помощью docker cp CVE-2026-17106 Это PoC-репозиторий для статьи в блоге CopyEscape: захват хостов Docker с помощьюdocker cp — CVE-2026-17106. CopyEscape позволяет вредоносному запущенному контейнеру вступить в гонку с генератором архивов Docker и создать...

CentOS Linux 6 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1775148022)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1775148022 advisory. - A buffer overflow vulnerability in function gnuspecial in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of...

CVE-2022-24734

CVE-2022-24734 PoC Une RCE peut être obtenue dans le panneau d'administration de MyBB sous Configuration - Ajouter un nouveau paramètre. L'utilisateur doit avoir les droits d'ajouter ou de mettre à jour un paramètre. Ceci a été testé sur MyBB 1.8.29. Sources: https://github.com/mybb/mybb/...

AZL-105173 CVE-2026-19444 affecting package kubernetes 1.30.10-30

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary ...

CVE-2026-19444

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary ...

EUVD-2026-88223

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary ...

CVE-2026-19444

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary ...

CVE-2026-19444: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary ...

CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnérabilités Ce rapport concerne la CVE-2025-44039 réservée pour la vulnérabilité UART du routeur attribuée au découvreur Yashodhan Vivek Mandke. Veuillez télécharger le rapport pdf dans ce repositoy...

PT-2026-98734

In the Linux kernel, the following vulnerability has been resolved: net/rds: clear cp flags bits individually in rds conn path reset rds conn path reset wipes the whole flag word with a plain cp-cp flags = 0 store. Every other accessor of that word uses atomic bitops, and some of them can run...

PT-2026-98058

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras suspend callback and use it for cp ecc error irq cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini, so the put site has to query amdgpu irq enabled because the get i...

K000163358: Moby vulnerability CVE-2026-42306

Security Advisory Description Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bin...

OESA-2026-3947 docker security update

Security Fixes: Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or...

OESA-2026-3948 docker security update

Security Fixes: Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or...