CVE-2026-54687

n8n-nodes-sqlite3 (versions

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Una collezione di exploit e documentazione per penetration tester e red teamer che può essere utilizzata per agevolare lo sfruttamento della vulnerabilità Dirty Pipe di Linux. Informazioni sulla vulnerabilità Dirty Pipe CVE-2022-0847 è una vulnerabilità di...

[SECURITY] [DSA 6475-1] suricata-update security update

5B------------------------------------------------------------------------- Debian Security Advisory DSA-6475-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq -...

CVE-2026-81727 NLTK before 3.10.3 Hardlink File Overwrite via downloader

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...

EUVD-2026-67077

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incrdownload methods that allows attackers to overwrite files outside the install root through pre-existing hardlinks. Attackers with write access to a shared downloader...

CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-56651

Dool (a shell utility for managing shell history) in versions up to 1.3.8 is vulnerable to symlink following when the --devel flag is used. The application opens its log file without the O_NOFOLLOW flag, allowing a local attacker to place a symlink at the expected log path pointing to a sensitive...

EUVD-2026-67129

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-76845

A flaw was found in adm-zip, a Node.js library used for handling zip archives. This vulnerability allows a local attacker to overwrite arbitrary files on the system. When extracting an archive, adm-zip follows symbolic links, which are special files that point to other files or directories. An...

CVE-2025-27591

CVE-2025-27591 - Escalata dei privilegi tramite gestione non sicura dei log Panoramica CVE-2025-27591 è una vulnerabilità di escalation locale dei privilegi nell'utility below versioni precedenti alla release corretta causata da gestione non sicura dei link simbolici all'interno del suo meccanism...

NodeJS-Tar-Symlink-Exploit-CVE-2026-29786

📦 CVE-2026-29786: Vulnerabilità Symlink in Tar di Node.js -yellow 📌 Riepilogo Esecutivo Questo repository documenta la ricerca su CVE-2026-29786 , una vulnerabilità ad alta gravità scoperta nel popolare pacchetto tar di Node.js. Il difetto consente a un attaccante di creare un archivio tar dannos...

sploits

sploits | कोड| विवरण ---|---|--- CVE-2018-4310| code| MediaRemote: अतिरिक्त सैंडबॉक्स प्रतिबंधों के साथ एक एक्सेस समस्या का समाधान किया गया CVE-2018-4991| code| Adobe Creative Cloud Desktop Application के संस्करण 4.4.1.298 और पहले के संस्करणों में एक शोषण योग्य अनुचित प्रमाणपत्र सत्यापन भेद्यता ह...

CVE-2026-31802

CVE-2026-31802: tar Attraversamento di Percorso tramite Symlink / Sovrascrittura Arbitraria di File Ricerca: Joshua van Rijswijk Descrizione Questo repository contiene la mia proof of concept e il write-up per CVE-2026-31802 , una vulnerabilità ad alta gravità nel pacchetto npm tar node-tar che...

CVE-2026-23745

CVE-2026-23745: node-tar Beliebige Dateiüberschreibung Forschung: Joshua van Rijswijk Beschreibung PoC für CVE-2026-23745 , eine Path-Traversal-Schwachstelle mit hohem Schweregrad in node-tar 7.5.2. Die Bibliothek versäumt es, absolute Pfade im linkpath-Feld für Hardlinks und Symlinks zu...

CVE-2026-21436

CVE-2026-21436 أداة إدارة الحزم في Solus OS eopkg = 4.3.4، أثناء تثبيت الحزم ذات الامتداد .eopkg، تقوم بكتابة الملفات التي تحتوي على مسارات مطلقة absolute paths داخل محتوى الحزمة مباشرة إلى الدليل المحدد. حتى عند استخدام المعامل --destdir الذي يُستخدم لتثبيت الحزمة في دليل معين، يمكن تجاوز هذا...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB.This issu...

CVE-2007-4559-lab

CVE-2007-4559 — TarSlip: اجتياز المسار عبر 15 عامًا للاستخدام التعليمي فقط. يستغل هذا المختبر عن قصد ثغرات نظام الملفات داخل حاويات Docker معزولة. لا تشغّله على أي نظام يحتوي بيانات حساسة أو في بيئات الإنتاج. مختبر Docker مستقل بذاته يوضح CVE-2007-4559 — ثغرة «TarSlip» سيئة السمعة في وحدة tarfile...

CVE-2026-77317 SeaweedFS: SFTP path ACL literal prefix match permits cross-tenant file read and overwrite

SeaweedFS is a distributed storage system for files and blobs. In versions from 3.88 through 4.39, the SFTP server evaluates configured path permissions with a literal string-prefix comparison, so a user scoped to a path is also granted the same access to any sibling path whose name merely begins...