CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC Flawfinder 2.0.19에서는 잠재적으로 악의적인 파일 이름을 파싱할 때 파일명 정화sanitization가 수행되지 않습니다. 알려진 영향받는 터미널은 libvte 기반이며, 아래 예시는 mate-terminal을 보여줍니다. 이 취약점은 5/17/26 기준으로 David Wheeler와 제가 Flawfinder 2.0.20에서 수정했습니다. 이 저장소에는 샘플 POC bash 스크립트와 취약점 작동 방식에 대한 몇 가지 정보가 포함되어 있습니다. 취약점 설명 샘플...

CVE-2026-35585-poc

CVE-2026-35585: Эксплойт PoC OS Command Injection в File Browser English version Обзор Этот репозиторий содержит Proof of Concept PoC для критической уязвимости OS Command Injection CVE-2026-35585 , обнаруженной в File Browser версии с 2.0.0 по 2.33.1. Уязвимость находится в функционале...

CVE-2026-85684 marker through 2.0.0 Path Traversal via upload filename

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existin...

EUVD-2026-71133

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existin...

USN-8723-1: SPICE vdagent vulnerabilities

It was discovered that SPICE vdagent had an integer overflow in the buffer size calculation used when writing to the daemon socket. A malicious or compromised SPICE host could possibly use this issue to cause SPICE vdagent to crash, resulting in a denial of service. CVE-2026-57965 It was discover...

POC-CVE-2026-19679

CVE-2026-19679 — 업로드된 파일 이름의 불충분한 무해화 입력 검증 상태: CONFIRMED — 6.7.2-14.el9 랩에서 확인됨2026-08-20. tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml"이 포함된 POST /rest/auditFile 요청은 HTTP 200을 반환하고 AuditFile 1000002를 등록했습니다 — 셸 메타문자가 포함된 파일 이름이 검증을 통과하여 종단 간end-to-end 저장되었습니다. 6.9.0에서는 동일한 요청이...

CVE-2023-38831-POC

Описание Название : CVE-2023-38831 Оценка CVSS : 7.8 Затронутые версии : Winrar 6.23 CVE-2023-38831 — это уязвимость нулевого дня, затрагивающая все версии WinRAR до 6.23. Проблема заключается в обработке формата ZIP, что может позволить злоумышленникам использовать уязвимые архивы для...

CVE-2026-81730

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachment in htdocs/emailcollector/lib/emailcollector.lib.php builds $filepath = $path . $filename . '.' . $ext and hands it ...

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

Linux Distros Unpatched Vulnerability : CVE-2026-65612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted...

CVE-2026-44829

Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier are vulnerable to a path traversal in zip entry names. The root cause is that filepath.Base on Linux does not treat backslashes as path separators, so Windows-style parent directory components (e.g., ..\..\Windows\System32...

CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

UBUNTU-CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

CVE-2026-65612 Shell Command Injection in nnn

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

EUVD-2026-62401

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

EUVD-2026-58741

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...