CVE-2026-77621

Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...

CVE-2026-77621 Vector: Arbitrary file write in the file sink via templated path (path traversal).

Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...

CVE-2026-77621 Vector: Arbitrary file write in the file sink via templated path (path traversal).

Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...

CVE-2026-77621 Vector: Arbitrary file write in the file sink via templated path (path traversal).

Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...

CVE-2026-77621

Vector , a high-performance observability data pipeline, is vulnerable to arbitrary file write via its file sink in versions 0.10.0 through 0.57.0 . The file sink renders its output path from a template that accepts event fields; when an untrusted source supplies a field containing an absolute pa...

CVE-2026-77621: Improper Limitation of a Pathname to a Restricted Directory

Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...

PT-2026-59499

Summary PDM writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite the symlink targets. This creates an arbitrary file clobber primitive relative to the privileges of the...

SDR-SaveRF

This is a module that could be used to save RF signals for debugging purpouses or to be replayed using a repeater, by default the destination is /tmp/saveRF !/usr/bin/env python2 -- coding: utf-8 -- GNU Radio Python Flow Graph Title: Exploit Pack - RF Hacking Author: Juan Sacco Description: RF Sa...