DirCreate2System

DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting Short Description: I've discovered comctl32.dll which is missing in system dir which doesn't really exist has been loaded by wermgr.exe via windows error reporting by runnin...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

pulp-rpm: Distribution tree publish creates directories from .treeinfo ids

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

pulp-rpm: Distribution tree publish creates directories from .treeinfo ids

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

pulp-rpm: Distribution tree publish creates directories from .treeinfo ids

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

CVE-2022-24924

Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...

CVE-2025-9435

ADManager Plus Build 7230 Elevation of Privilege CVE-2025-9435 Requirements A technician user with the 'Modify user general properties' role and logon access to the server where ADManager is installed. Description If the technician user has logon rights on the server , they can escalate privilege...

CVE-2025-46078

BUGAuthor: yggcwhat Affected version: Huocms Vendor: https://huocms.com/ Source Code Address: https://gitee.com/digital-flag/huocms Vulnerability File: Upload.php Affected Version： HuoCMS - controller - backend, the resourcetype parameter is validated against a whitelist of allowed file extension...

CVE-2019-16784-POC

CVE-2019-16784 POC This is my POC for the Windows PyInstaller version 3.6 vulnerability that exists for the --onefile option. An attacker could achieve command execution and possible LPE by hijacking a DLL imported by the python interpreter DLL used by the pyinstaller binary. A short explanation ...

EulerOS Virtualization 2.15.1 : python-virtualenv (EulerOS-SA-2026-4575)

According to the versions of the python-virtualenv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU...

GitPython: GitPython: Arbitrary Code Execution via Path Traversal

A flaw was found in GitPython. This vulnerability allows a remote attacker to create arbitrary Git directories outside the intended clone destination. By manipulating the separategitdir parameter during repository cloning, an attacker can redirect repository metadata to an attacker-controlled...

GitPython: GitPython: Arbitrary Code Execution via Path Traversal

A flaw was found in GitPython. This vulnerability allows a remote attacker to create arbitrary Git directories outside the intended clone destination. By manipulating the separategitdir parameter during repository cloning, an attacker can redirect repository metadata to an attacker-controlled...

CVE-2026-76806 Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle

Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData read attacker-controlled project id values from projects.json in uploaded ZIP imports and concatenated them into filesystem paths without validation. Because...

CVE-2026-76806

The open-source time-tracking application Solidtime (prior to version 0.16.0 ) is vulnerable to a Path Traversal flaw in its TogglDataImporter::importData() function. The vulnerability exists because the importer reads attacker-controlled project ID values from projects.json within uploaded ZIP f...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking this. The issue...

CVE-2026-120204

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...

CVE-2026-120204

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...

CVE-2026-120204

DeepInfer versions through 0.1.0 are vulnerable to a path traversal vulnerability in the unauthenticated /profile endpoint. The root cause is the lack of proper validation on the output_dir parameter, allowing remote attackers to create arbitrary directories. Attackers can leverage this to write ...

EUVD-2026-114725

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...

CVE-2026-120204: deepseek-ai DeepInfer: DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows…

DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...