solr_exploit

Disclaimer The vulnerability detection methods, files, and other content provided here are strictly for use by security professionals who have obtained legal authorization, with the purpose of detecting the security of authorized servers. Security professionals must comply with legal regulations...

delete-self-poc

🗑️ delete-self-poc delete-self-poc는 잠긴 실행 파일이나 현재 실행 중인 파일을 디스크에서 삭제하는 방법을 시연합니다. 이 개념은 처음에 Jonas Lykkegaard가 발견했으며, 저는 이에 대한 개념 증명POC을 만들었습니다. 또한 현재 호출 프로세스에 해당 파일에 접근하고 삭제하는 데 필요한 권한이 있다면 디스크에서 잠긴 파일을 삭제하는 데에도 사용할 수 있습니다. 그런데 이 POC에서는 어떻게 작동할까요? 1. DELETE 액세스 권한으로 현재 실행 중인 프로세스에 대한 HANDLE을 엽니다...

SUSE CVE-2026-18220

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

cyber-apocalypse-ctf-2026

Links Challenges | Catego...

CVE-2026-18220

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220

The CVE-2026-18220 vulnerability affects the GNU binutils BFD library’s DLX ELF backend (source file bfd/elf32-dlx.c). The root cause is an insufficient bounds check in dlx_rtype_to_howto() on ELF32_R_TYPE(r_info) before indexing into dlx_elf_howto_table[], despite non-contiguous DLX relocation t...

Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010

The Image module allows you to define and configure image fields. The module doesn't sufficiently check access to image style derivatives when those files are served via a file stream other than private://. This vulnerability is mitigated by the fact that Drupal must be configured to use a...

CVE-2026-46431 Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server's Access-Control-Allow-Origin response header was hardcoded to the wildcard regardless of the caller's Origin. Because EventSource does not preflight and does not send cookies, the wildcard is sufficient ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A memory leak in getfilestreaminfo has been fixed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013437 advisory. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in getfilestreaminfo Fix memleak in getfilestreaminfo Tenable has extracted th...

CVE-2026-5928

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...

UBUNTU-CVE-2026-5928

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...

PT-2026-8353

A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast streen of the file /jdcapi of the component jdcweb rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The attack may be performed from remote...

CVE-2025-68705

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/readfilestream endpoint. This issue has been patched in version 1.0.0-alpha.79...

CVE-2025-68705

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/readfilestream endpoint. This issue has been patched in version 1.0.0-alpha.79...

CVE-2025-68705

RustFS exposes a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint affecting versions 1.0.0-alpha.13 through 1.0.0-alpha.78; the issue stems from insufficient path validation via volume_dir.join(Path::new(&path)) without canonicalization or boundary checks, allowing paths ...

CVE-2025-68705 RustFS Path Traversal Vulnerability

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/readfilestream endpoint. This issue has been patched in version 1.0.0-alpha.79...

RustFS Path Traversal Vulnerability

RustFS Path Traversal Vulnerability Vulnerability Details - CVE ID: - Severity: Critical CVSS estimated 9.9 - Impact: Arbitrary File Read/Write - Component: /rustfs/rpc/readfilestream endpoint - Root Cause: Insufficient path validation in crates/ecstore/src/disk/local.rs:1791 Vulnerable Code rust...

PT-2026-1916

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.13 through 1.0.0-alpha.78 Description RustFS is a distributed object storage system built in Rust. Versions 1.0.0-alpha.13 through 1.0.0-alpha.78 contain a path traversal vulnerability in the /rustfs/rpc/read file...

rustfs 路径遍历漏洞

rustfs is a high-performance object storage system in the RustFS open source. A path traversal vulnerability exists in rustfs versions 1.0.0-alpha.13 through 1.0.0-alpha.78, which stems from a path traversal in the /rustfs/rpc/readfilestream endpoint...