CVE-2022-38604

استغلالات لـ CVE-2022-38604 FilesystemEoPs هي نسخة من هذا المستودع مع إضافة المشاريع المُجمّعة لـ x64. هنا يمكنك العثور على تقريري حول ثغرة حذف الملفات التعسفي. هنا يمكنك فهم كيفية استخدام أولية حذف الملفات التعسفي لتحقيق تصعيد الامتيازات المحلي. هنا يمكنك فهم كيفية استخدام أولية حذف الملفات...

SUSE CVE-2017-20285

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...

WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Philipp Doblhofer in WordPress Plugin Simple File List versions = 6.3.11...

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 est vulnérable à la suppression arbitraire de fichiers. Pour exploiter la vulnérabilité, un attaquant authentifié avec le rôle de superadmin peut envoyer une requête POST spécialement conçue au point d'accès affecté en utilisant le paramètre url remo...

Gitlab-CVE-2026-19478

CVE-2026-19478 — حقن توجيهات @glintroduced في GraphQL الخاص بـ GitLab حقن كود عن بُعد بدون مصادقة عبر توجيه GraphQL في GitLab CE/EE — احذف أي مشروع عام بطلب HTTP واحد مختبر اختبار اختراق عملي يعيد إنتاج CVE-2026-19478، وهي ثغرة حرجة CVSS 9.4 في واجهة GraphQL API الخاصة بـ GitLab. يسمح توجيه...

CVE-2023-27470_Exercise

تمرين تصعيد الامتيازات عبر حذف ملف تعسفي CVE-2023-27470 يحتوي هذا المستودع على تمرين لتصعيد الامتيازات المحلية يحاكي CVE-2023-27470. مهمتك، إذا اخترت قبولها، هي العثور على الثغرة والحصول على موجه أوامر SYSTEM! إذا كنت ترغب في الانتقال إلى الحل، انظر إلى solution.txt. اقرأ المزيد عن ثغرات حذف...

WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Jobs for WordPress versions = 2.8.2...

BIT-PYTHON-MIN-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

BIT-LIBPYTHON-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

Astra Linux – Vulnerability in docker.io-app

BuildKit is a toolkit for converting source code into build artifacts in an efficient, expressive, and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could exploit a feature that removes empty files created for the mountpoints, causing the file to be removed from...

Astra Linux – Vulnerability in WebKit2GTK

“Clear History and Website Data” did not successfully clear the browsing history. The issue was resolved through improved data deletion mechanisms. This issue has been fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3, and iPadOS 14.3, as we...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: Protect flwalk with rcu. The patch that refactored flwalk to use idrforeachentrycontinueul also removed the rcu protection for individual filters. This caused a use-after-free when the filter was deleted...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Ensure that the DAID handling is completed before deleting an NPIV instance. Deleting an NPIV instance requires that all fabric ndlps be released before the resources of the NPIV can be destroyed. Failure to release t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: Avoid scheduling the deletion of associations twice. When forcibly shutting down a port via the configfs interface, nvmetportsubsysdroplink first calls nvmetportdelctrls, and then nvmetdisableport. Both functions will...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: net: ipv4: fixed a issue where deleting routes with a nexthop object triggered a warning. The FRR team encountered a kernel warning1 while deleting routes2. This issue occurred when attempting to delete a route that pointed to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fixed a use-after-free race condition for maps It is possible that before fastrpcfreemap is called, another thread may call fastrpcmaplookup and obtain a reference to a map that is about to be deleted. The function...

Astra Linux – Vulnerability in Rails

Active Storage allows users to attach cloud and local files in Rails applications. Before versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage’s DiskServicedeleteprefixed method passed blob keys directly to Dir.glob, without escaping the glob metacharacters. If a blob key contains...

Astra Linux – Vulnerability in pillow

In version 9.0.1, Pillow allows attackers to delete files because spaces in temporary pathnames are mishandled...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fixed the use-of-memory issue related to metadatadst during RX SC deletion. When an offloaded MACsec RX SC is deleted, the function macsecdelrxscctx frees the per-SC metadatadst using metadatadstfree. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Fixed a panic that occurred during namespace deletion with VF. The existing code moves the VF NIC to a new namespace when NETDEVREGISTER is received on the netvsc NIC. During the deletion of the namespace,...