CVE-2026-31802

🛡️ CVE-2026-31802 - Visionneuse simple de Preuve de Concept 📋 À propos de CVE-2026-31802 Ce dépôt fournit une preuve de concept PoC et un rapport détaillé pour CVE-2026-31802. Le problème est une vulnérabilité de sécurité dans le paquet npm tar. Elle permet aux attaquants de tromper le logiciel...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 est une vulnérabilité dans le module tarfile de Python qui permet d’écrire des fichiers arbitraires en dehors du répertoire d’extraction lors de l’extraction d’archives tar non fiables. Le problème survient lors de l’utilisation de TarFile.extract ou...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 и CVE-2025-71260 BMC FootPrints — цепочка предварительно аутентифицированного удалённого выполнения кода Инструмент генератора детектирующих артефактов для цепочки предварительно аутентифицированного удалённого выполнения кода BMC FootPrints Описание Этот генератор детектирующих...

varlib-cve-2025-66034

fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...

CVE-2026-103511

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103507

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103511 Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

EUVD-2026-92311

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2026-103511

Prior to version 2026.4.2 , Perforce P4 Search is vulnerable to an arbitrary file-write flaw. The software fails to validate file names provided to its extension installation feature . An attacker possessing super-user or service-token privileges can exploit this to write files containing arbitra...

CVE-2017-1000117

Репозиторий PoC для CVE-2017-1000117 VulApps Форк от joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git запишет вывод команды id в файл vul в /var/www/html. Подробнее на VulApps...

CVE-2026-103507

Perforce P4 Search versions prior to 2026.4.2 are vulnerable to an arbitrary file-write flaw because the software fails to restrict file paths through its logging configuration interface . An attacker possessing a service authentication token can write arbitrary files to the host, which may lead ...

EUVD-2026-92299

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-103507 Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account...

CVE-2026-104805

The Mitel MiVoice Office 400 system contains a vulnerability in its backup restoration functionality that allows for arbitrary file write . The flaw arises because the system fails to validate paths, file types, integrity, and authenticity of files within a TGZ archive before extraction, notably ...

CVE-2026-104805 Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

CVE-2025-8110

CVE-2025-8110 — Écriture arbitraire de fichiers via traversée de lien symbolique dans Gogs = 0.13.3 Présentation Gogs = 0.13.3 est vulnérable à l'écriture arbitraire de fichiers via l'API PutContents /api/v1/repos/:owner/:repo/contents/:path. L'API valide les chemins contre les séquences de...

CVE-2026-36227

CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit : Casdoor 3.54.1 Path Traversal et écriture arbitraire de fichiers Authentifié Ce dépôt contient un exploit Proof of Concept PoC pour CVE-2026-6815, une vulnérabilité d'écriture arbitraire de fichiers et de path traversal dans Casdoor. La vulnérabilité a été corrigée dan...

PT-2026-104813

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

PT-2026-106247

Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...