CVE-2026-102143 Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate...

CLEANSTART-2024-XJ51471 flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers

Security vulnerability affects the buildah package. A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers...

log4j-finder

log4j-finder 파일시스템을 스캔하여 Log4ShellCVE-2021-44228 & CVE-2021-45046 & CVE-2021-45105에 취약한 Log4j2를 찾는 Python3 스크립트입니다. 디스크와 Java 아카이브 파일JAR 내부중첩 포함를 재귀적으로 스캔합니다. 작동 방식 log4j-finder는 log4j2-core- 패키지에 포함된 특정 파일현재는 JndiManager.class만 해당의 알려진 나쁜 및 알려진 좋은 MD5 해시 목록을 사용하여 파일시스템에서 log4j2 라이브러리를 식별합니다...

CVE-2021-41091

CVE-2021-41091 이 익스플로잇은 CVE-2021-41091 보안 취약점에 대한 심층 분석을 제공하며, 호스트에서 권한 상승을 달성하기 위해 익스플로잇 스크립트를 활용하는 방법을 단계별로 안내합니다. 취약점 요약 CVE-2021-41091은 MobyDocker Engine의 결함으로, 부적절하게 제한된 권한으로 인해 권한이 없는 Linux 사용자가 데이터 디렉토리일반적으로 /var/lib/docker에 위치 내에서 프로그램을 탐색하고 실행할 수 있게 합니다. 이 취약점은 컨테이너에 setuid와 같은 확장된 권한이 있...

tscopy

TScopy Updated 2022-03-31 Introducing TScopy It is a requirement during an Incident Response IR engagement to have the ability to analyze files on the filesystem. Sometimes these files are locked by the operating system OS because they are in use, which is particularly frustrating with event logs...

CVE-2024-21626

이용: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up 검증: 호스트의 /etc/passwd를 획득할 수 있다면 해당 취약점이 존재합니다. 환경: runc: =v1.0.0-rc93,=1.1.11 공격 세부 원리: runc 영향 버전에서는 초기화 과정에서 호스트의 /sys/fs/cgroup 핸들을 포함한 일부 내부 파일 디스크립터가 유출되며, runc는 최종 작업 디렉토리가 컨테이너의 마운트 네임스페이스 내에 있는지 검증하지 않습니다. 공격...

CVE-2023-42931

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 우리는 테러 단체 하마스에 의해 인질로 잡힌 모든 시민의 안전한 귀환을 요구합니다. 모든 인질이 석방되어 안전하게 집으로 돌아올 때까지 우리는 쉬지 않을 것입니다. 여러분도 그들을 집으로 데려오는 데 도움을 줄 수 있습니다.https://stories.bringthemhomenow.net/ macOS 권한 상승 익스플로잇 💻 이 PoC는 다음 기사를 기반으로 작성했습니다:...

CVE-2026-102252

A flaw was found in OSV-SCALIBR. This vulnerability allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning a crafted Virtual Machine Disk VMDK image, insufficient validation of archive path entries in the embedded filesystem extractor allows...

CVE-2026-88899

CVE-2026-88899 - Knowns 0.30.0 인증되지 않은 헤더 주입으로 AI 에이전트가 호스트 파일시스템에 무제한 접근 가능 개요 Knowns의 내장 OpenCode AI 에이전트 데몬용 리버스 프록시internal/server/server.go와 관련하여 부적절한 권한 부여 및 헤더 스푸핑 취약점이 보고되었습니다. 보고서에 따르면, 로컬 OpenCode 데몬으로 HTTP 요청을 프록시할 때 프록시가 x-opencode-directory 요청 헤더와 ?directory 쿼리 파라미터를 무조건 덮어쓰지 못했습니다. ...

Malicious code in imgbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14218599b46d143fa8e150156864d14d58c327bd8a8816221ac4e8c5cc99350 The package advertises itself as an image bundler, but index.js performs no image bundling. On require, a top-level IIFE reads an AES-256-CBC-encrypt...

Homematic CCU3 - Local File Inclusion

eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem, aka local file inclusion. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. id: CVE-2019-9726 info: name: Homematic CCU3 - Local...

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request. id: CVE-2026-5027 info: name: Langflow = 1.8.4 -...

CentOS Linux 8.5 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1779583625)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779583625 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1777460138)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777460138 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-2183 Note that Nessus has not tested for this issue but has instead...

CentOS Linux 8.5 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1779356706)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779356706 advisory. - vim is vulnerable to Out-of-bounds Read CVE-2021-4166 - Access of Memory Location Before Start of Buffer in GitHub repository...

CentOS Linux 8 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS-STREAM8:CLSA-2026:1768570231)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1768570231 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local...

CentOS Linux 8 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1789464785)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1789464785 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without...

CentOS Linux 7 [TuxCare] Security Update: grub2 / grub2-common / grub2-efi-ia32 / grub2-efi-ia32-cdboot / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1771332544)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1771332544 advisory. - When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its intern...

AlmaLinux 8 : nodejs:22 (ALSA-2026:62219)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62219 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1767617422)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767617422 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3903 - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...