847 matches found
CVE-2025-47181
CVE-2025-47181 Concept: Microsoft Edge Link Following Privilege Escalation Project Overview This repository presents the CVE-2025-47181 Concept , a Python program designed to illustrate the mechanism and impact of CVE-2025-47181. This is a Privilege Escalation vulnerability in Microsoft Edge...
CVE-2025-48384-poc
CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...
CVE-2025-21420_POC
Diffing cleanmgr.exe The new version of cleanmgr.exe includes a call to the SetProcessMitigationPolicy function. With MitigationPolicy set to 16, corresponding to ProcessRedirectionTrustPolicy. Combined with Microsoft's description of CWE-59: Improper Link Resolution Before File Access 'Link...
dcrawl
dcrawl dcrawl ใฏใใฆใใผใฏใชใใกใคใณๅใฎๅทจๅคงใชใชในใใใฉใณใใ ใซๅ้ใใใใใฎใใทใณใใซใงใใใชใใในใใผใใชใใซใในใฌใใใฆใงใใฏใญใผใฉใผใงใใ ๅไฝใฎไป็ตใฟ dcrawl ใฏ 1 ใคใฎใตใคใ URL ใๅ ฅๅใจใใฆๅใๅใใใตใคใใฎๆฌๆๅ ใฎใในใฆใฎ ใชใณใฏใๆคๅบใใพใใ่ฆใคใใฃใๅใชใณใฏใฏใญใฅใผใซ่ฟฝๅ ใใใพใใ็ถใใฆใใญใฅใผใซๅ ฅใฃใๅใชใณใฏใๅๆงใซใฏใญใผใซใใใๅใตใคใๆฌๆใฎใชใณใฏใง่ฆใคใใฃใใใใซๅคใใฎ URL ใซๅๅฒใใฆใใใพใใ ในใใผใใฏใญใผใชใณใฐ ใฎไป็ตใฟ๏ผ 1 ใคใฎใในใๅใซใคใใไบๅใซๅฎ็พฉใใใๆฐใฎใชใณใฏใฎใฟใซๅๅฒใใพใใ 1...
CVE-2026-41091-PoC-Exploit
CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit ๆณ็ๅ ่ฒฌไบ้ ใใใณ่ฒฌไปปใใไฝฟ็จ ใใฎใใผใซใฏใๆ่ฒใใใณ่จฑๅฏใใใใใใใฌใผใทใงใณใในใใฎ็ฎ็ใงใฎใฟๆไพใใใฆใใพใใ ไฝ่ ใใใณ่ฒข็ฎ่ ใฏใๆฌใฝใใใฆใงใขใฎ่ชค็จใพใใฏๆๅฎณใซๅฏพใใฆไธๅใฎ่ฒฌไปปใ่ฒ ใใพใใใใฆใผใถใผใฏใใในใๅใซใฟใผใฒใใๆๆ่ ใใๆ็คบ็ใชๆธ้ขใซใใ่จฑๅฏใๅพใฆใใใใจใ็ขบ่ชใใๅ็ฌใฎ่ฒฌไปปใ่ฒ ใใพใใใณใณใใฅใผใฟใทในใใ ใธใฎไธๆญฃใขใฏใปในใฏใ้ฉ็จใใใ้ฃ้ฆๆณใๅทๆณใใใใณๅฝ้็ใชใตใคใใผ็ฏ็ฝชๆณใฎไธใง้ๆณใงใใ...
web-traffic-generator
web-traffic-generator ่ฟ ้ใงไนฑๆดใชHTTP/Sใๆๆฉ็ใใใฉใใฃใใฏใธใงใใฌใผใฟใผใ ๆฆ่ฆ ใใใใใๅฎ็พฉใใใ ROOTURLS ใใ้ๅงใใใใผใธไธใฎใชใณใฏใใฉใณใใ ใซใใฏใชใใฏใใใฆใไบๅๅฎ็พฉใใใ MAXDEPTH ใซ้ใใใพใงใคใณใฟใผใใใใ็ก็ฎ็ใซใ้ฒ่ฆงใใใใๅ็ดใช๏ผๅบๆฅใฎๆชใ๏ผPythonในใฏใชใใใงใใ...
CVE-2026-0827
CVE-2026-0827 LdeApi.Server.exe ใใญใปในใฏใๅฝ่ฃ ใ่กใใใซ MP27AM7Westimation.json ใ C:\ProgramData\Lenovo\LDE\SYSTEM ใซๆธใ่พผใใใจใใพใใใใฎใใฃใฌใฏใใชใฏใใใฉใซใใงใฏๅญๅจใใพใใใC:\ProgramData\ ใงใฏๆจๆบใฆใผใถใผใใตใใใฃใฌใฏใใชใไฝๆใงใใใใใไฝๆจฉ้ใฎใฆใผใถใผใฏใใฎใในใไฝๆใใไปปๆใฎๅ ดๆใๆใ NTFS ใธใฃใณใฏใทใงใณใซๅคๆใงใใพใใใตใผใในใฏใธใฃใณใฏใทใงใณใซๅพใใSYSTEM ๆจฉ้ใงๆปๆ่ ใๅถๅพกใใๅฎๅ ใซใใกใคใซใๆธใ่พผใฟใพใใ...
openSUSE 16 Security Update : php-composer2 (openSUSE-SU-2026:21970-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21970-1 advisory. - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898. Tenable has extracted the...
Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_25113)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625113 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_25220)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625220 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_25114)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625114 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
CVE-2026-81310
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...
CVE-2026-81310
The Image Scanner Driver for Linux is vulnerable to a link following vulnerability. An attacker with local access to a Linux system where the product is installed can use a special method in advance to overwrite arbitrary files . No specific exploit details or remediation steps are provided in th...
CVE-2026-81310
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...
EUVD-2026-89568
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...
CVE-2026-81310
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...
CVE-2024-21111
CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...
OPENSUSE-SU-2026:21970-1 Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898...
Amazon Linux 2023 : composer (ALAS2023-2026-3136)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3136 advisory. Package bin path can escape the package directory, bypassing the GHSA-gjfg-22fp-rrxx fix. A malicious or compromised Composer package could, when installed as a dependency, cause Composer to...
CVE-2026-41091
๐ก๏ธ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...