CVE-2026-82765

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

EUVD-2026-77222

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V para PC permite a los atacantes lograr una ejecución remota parcial de código o modificar archivos en un PC, tal como se explotó en la naturaleza en enero de 2023. autenticación| complejidad| vector ---|---|--- no disponible| no disponible| no disponible...

CVE-2016-5195

Descripción: dcow es un posible exploit de la vulnerabilidad CVE-2016-5195. Ejecutando el programa como usuario no privilegiado en un sistema vulnerable, modificará el archivo /etc/passwd, forzando la contraseña "dirtyCowFun" SHA-512, pero podría modificarse para estándares antiguos. En caso de...

CVE-2022-0847

CVE-2022-0847 PoC Usage root@kitploit: dirty-pipe CVE-2022-0847 USAGE: dirty-pipe --target --offset --data OPTIONS: -t, --target TargetFile -o, --offset Offset -d, --data Data -h, --help Print help information...

CVE-2022-30525_check

CVE-2022-30525check Descripción: Este script verifica la presencia de la vulnerabilidad de inyección de comandos del sistema operativo CVE-2022-30525 en dispositivos Zyxel USG FLEX que ejecutan versiones de firmware 5.00 a 5.21 Parche 1. La vulnerabilidad permite a un atacante modificar archivos...

SparstanBoogie

SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 La vulnerabilidad Dirty Pipe, también conocida como CVE-2022-0847, es una falla significativa dentro del kernel de Linux. Este repositorio proporciona una versión adaptada del código de exploit ampliamente utilizado para hacerlo más fácil de usar y modular. Se...

CVE-2021-1675_CarbonBlack_HuntingQuery

Consulta de caza en CarbonBlack para CVE-2021-1675 PrintNightmare 1 Basado en la regla Sigma para detectar el código POC root@kitploit: filemodname:c:\windows\system32\spool\drivers\x64\3\old\1\123 2 Basado en la regla Sigma para detectar el código POC root@kitploit:...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2025-43537

CVE-2025-43537 Apple 安全致谢 研究人员： Al Sadman Awal 已获得 Apple 产品安全团队对 CVE-2025-43537 负责任披露的正式致谢。 概述 CVE-2025-43537 是一项在独立安全研究中发现并负责任地向 Apple 披露的安全漏洞。 Apple 调查了该报告，实施了安全修复，分配了 CVE-2025-43537，并在其官方安全公告中公开致谢该贡献。 本仓库记录了与该漏洞相关的公开披露、厂商致谢和公告信息。 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2025-43537 厂商| Apple 研究人员| Al...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acceso a través del archivo wfufiledownloader.php, WordPress File Upload Solution poc, se produce una vulnerabilidad en la solución, se puede acceder a archivos de forma arbitraria y manipularlos o modificarlos...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 is a local privilege escalation vulnerability in sudo when using the sudoedit command. This vulnerability was introduced in sudo 1.9.0 due to the way sudoedit validates user environment variables and file ownership improperly. 📖 Description A flaw introduced in sud...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - Falta de autorización para modificación de archivos no autenticada Resumen ejecutivo...

OESA-2026-3600 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

OESA-2026-3598 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

OESA-2026-3597 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

CVE-2026-85669 potpie through 2.0.0 Missing Ownership Check via code-changes sync

potpie through 2.0.0 fails to verify user ownership on the POST /conversations/conversationid/code-changes/sync endpoint. Authenticated attackers can write arbitrary file changes into other users' conversations by supplying their conversation IDs, allowing unauthorized modification of pending...