CVE-2023-25152: Improper Link Resolution Before File Access

Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their...

CVE-2023-25168: Improper Link Resolution Before File Access

Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with GHSA-p8r3-83r8-jwj5 to overwrite files on the host system. In order to use this exploit, an attacker must have an...

CVE-2022-42292: Improper Link Resolution Before File Access

NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a file that requires elevated privileges to write to or modify, which may lead to denial of service, escalation of privilege or limited data...

CVE-2023-20008: Improper Link Resolution Before File Access

A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local file system. An attacke...

CVE-2022-45440: Improper Link Resolution Before File Access

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a...

CVE-2023-21542: Improper Link Resolution Before File Access

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21760: Improper Link Resolution Before File Access

Windows Print Spooler Elevation of Privilege Vulnerability...

CVE-2022-38482: Improper Link Resolution Before File Access

A link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4...

CVE-2023-21725: Improper Link Resolution Before File Access

Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability...

CVE-2023-21678: Improper Link Resolution Before File Access

Windows Print Spooler Elevation of Privilege Vulnerability...

Group Policy Preference Client Privilege Escalation

The vulnerability of the Group Policy Preference Client module for the Windows operating system is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges within the system using a specially created...

Debian dla-3202 : bsdcpio - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3202 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3202-1 [email protected]...

Git Source Code Management Code Execution (CVE-2021-21300)

An improper link resolution exists in the checkout mechanism of Git Source Code Management git-scm by Git. An out-of-order checkout triggered by a delayed checkout or checkout-index may result in an improper validation of a file resource type prior to performing a file write operation. A remote...

CVE-2022-31256

CVE-2022-31256 is a local privilege-escalation issue in the openSUSE/openSUSE Factory sendmail workflow. Affected component: a script invoked by the sendmail systemd service. Root cause: improper link resolution before file access ("link following") in that script allows a local attacker to escal...

CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...

CVE-2022-31256

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...

PT-2022-20643 · Sendmail +1 · Sendmail +1

Name of the Vulnerable Software and Affected Versions: openSUSE Factory sendmail versions prior to 8.17.1-1.1 Description: A local attacker can exploit an Improper Link Resolution Before File Access issue, also known as 'Link Following', in a script used by the sendmail systemd service to escalat...

Warpinator File Access

The vulnerability of the file-sharing software between remote desktops in Warpinator relates to the improper handling of links before accessing files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-2568)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-42725: Improper Link Resolution Before File Access

Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links...