Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...

CVE-2026-115713

Elastic Cloud Enterprise (ECE) is affected by a Symlink Attack (CWE-59) due to improper link resolution before file access. This vulnerability allows an attacker who can already execute code inside an Enterprise Search instance container to gain unauthorized read and write access to data belongin...

CVE-2026-115709 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss

Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE can lead to unauthorized disclosure and loss of data belonging to other deployments on the same host via Symlink Attack CAPEC-132...

Elastic Cloud Enterprise (ECE) 4.2.1 Security Update (ESA-2026-222)

Improper Link Resolution Before File Access 'Link Following' in Elastic Cloud Enterprise ECE Leading to Information Disclosure and Data Modification Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE can lead to unauthorized read and write access t...

CVE-2021-3310

CVE-2021-3310 Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability Use the included files to trigger the vulnerability on mycloud OS 3, this is patched in OS 5...

CVE-2026-115713: Elastic Elastic Cloud Enterprise: Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…

Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE can lead to unauthorized read and write access to data of other deployments on the same host via Symlink Attack CAPEC-132...

CVE-2026-108332

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

CVE-2026-108332 Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

EUVD-2026-111260

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

CVE-2026-108332

Tanium addressed an improper link resolution before file access vulnerability (CWE-59) within the Threat Response Client Extension . The vulnerability allows for potential high impact on confidentiality and integrity when an attacker can influence link resolution. Exploitation details are not pro...

PT-2026-127170

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

CentOS Linux 6 [TuxCare] Security Update: libarchive / libarchive-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792818341)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792818341 advisory. - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the lin...

CVE-2026-76496

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76496 Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76496 Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-76496

The Cisco Expressway Series software is affected by vulnerabilities involving improper link resolutions , categorized under CWE-59 . These issues were identified during an internal security review and are addressed in the October 2026 software hardening releases . The vulnerabilities have a High ...

Linux Distros Unpatched Vulnerability : CVE-2026-80430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program...

Linux Distros Unpatched Vulnerability : CVE-2026-109596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via...

Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76496: Cisco Expressway Series Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

Cisco TelePresence Video Communication Server Expressway Postback Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a post-release vulnerability due to improper link resolution. This vulnerability may be exploited by local, low-privilege attackers, resulting in compromised confidentiality, integrity, and availability...