Astra Linux – Vulnerability in OpenSSH

In OpenSSH 8.2, the scp client incorrectly sends duplicate responses to the server when a utimes system call fails. This allows a malicious, unprivileged user on the remote server to overwrite arbitrary files in the client’s download directory by creating a crafted subdirectory anywhere on the...

Astra Linux – Vulnerability in Python-Django

Django versions prior to 2.2.24, 3.x prior to 3.1.12, and 3.2.x prior to 3.2.4 have a potential issue with directory traversal through django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfs: Do not wander off the end of a directory data block This fix adds sanity checks for xfsdir2dataunused and xfsdir2dataentry to ensure that the code does not go beyond the valid memory region. Before the patch, the loop simply...

Astra Linux – Vulnerability in TIF format

A buffer overflow in LibTiff v4.0.10 allows attackers to cause a denial of service through the “TIFFVGetField” function in the component ‘libtiff/tifdir.c’...

Astra Linux – Vulnerability in OpAM

In OCaml opam before version 2.5.1, a .install field containing a destination filepath can use ../ to access the parent directory...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: added a missing check for inode numbers on directory entries. Syzbot reported that mounting and unmounting a specific pattern of corrupted nilfs2 filesystem images causes a use-after-free of metadata file inodes, which...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JNDI. The supported versions affected include Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3, and 22.2.0. This vulnerabili...

Astra Linux – Vulnerability in Git

Git is an open-source, scalable, distributed version control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are vulnerable to exposure of sensitive information by malicious actors. When performing a local clone where the source and target of the clone...

CVE-2025-27591

CVE-2025-27591 低于 v0.9.0 版本的 PoC 权限提升利用 免责声明 此利用仅用于教育目的 。它旨在帮助用户理解安全漏洞并提高他们的网络安全知识。作者不纵容任何非法活动或未经授权的系统访问。请负责任地使用此信息，并且仅在您拥有明确测试权限的环境中操作。 描述： 在 v0.9.0 之前的 Below 服务中存在一个权限提升漏洞，原因是创建了世界可写目录 /var/log/below。这可能允许本地非特权用户通过符号链接攻击（操纵诸如 /etc/shadow 等文件）提升至 root 权限。...

CVE-2020-29666

CVE-2020-29666 Listado de directorios Descripción sugerida En Lan ATMService M3 ATM Monitoring System 6.1.0, debido a una vulnerabilidad de listado de directorios, un atacante remoto puede ver archivos de registro, ubicados en /websocket/logs/, que contienen los valores de cookies de un usuario y...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC 这是针对由 Outpost24 Ghost Labs 的 Jonas Mattsson 和 Hugo van den Toorn 发现的三个漏洞的概念验证（Proof-of-Concept）利用代码。这些漏洞存在于 Pyrescom Termod4 时间考勤（time control）机器的 Web 服务器组件中。这些漏洞可以串联利用，允许远程攻击者绕过身份验证、读取本地文件系统中的文件并执行任意命令。以下 CVE ID 可用于引用这些漏洞：CVE-2020-23160、CVE-2020-23161 和 CVE-2020-23162。 CVE 详情...

cve-2020-3452

CVE-2020-3452-利用工具 仅供教育用途！ 只是一个基本的利用程序，滥用 CVE-2020-3452 来枚举 CISCO ASA/FTD 设备 Web 目录中可访问的标准文件。 用法： 默认情况下，此工具使用基于 Metasploit Framework 中 CVE-2018-0296 的示例输出构建的文件列表（https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/ciscodirectorytraversal.md）。...

CVE-2023-0157

CVE ID : CVE-2023-0157 漏洞类型 : 目录遍历 描述 : 用于 WordPress 的 All-In-One Security AIOS 插件在版本 5.1.4 及之前版本中存在目录遍历漏洞。这使得经过身份验证且具有管理员权限的攻击者能够读取服务器上任意文件的内容。 复现步骤 : Just create a test.pdf file with JavaScript content necessarily in one line and display the file in the Host system logs. An example of a...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 在网站组件中允许目录遍历 漏洞类型 目录遍历 产品供应商 Stakater 受影响产品代码库 Forecastle = v1.0.144 受影响组件 受影响组件：URL - https://www.example.com/%5C../etc/passwd 攻击类型 本地 影响：权限提升 true 影响：信息泄露 true 攻击向量 攻击向量： https:///%5C../etc/passwd 攻击者可以通过操纵 URL 来利用目录遍历漏洞，从而越出预期的 Web 目录范围进行访问。通过在 URL...

CVE-2026-13736

CVE-2026-13736：NewPath WildApricotPress 附加组件 – 会员目录 快速链接： 探索研究员的官方网络安全作品集，或查看官方 WPScan 公告。 📌 执行摘要与技术元数据 参数| 技术规格 ---|--- 漏洞标识符| CVE-2026-13736 目标软件| NewPath WildApricotPress 附加组件 – 会员目录（WordPress 插件） 插件 Slug| newpath-wildapricotpress-add-on-member-directory 受影响版本| = 1.0.0 漏洞类型| 访问控制不当 /...

CVE-2026-104810

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104397

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104396

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104396 WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104396 WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...