EUVD-2026-73180

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67368

Microsoft SQL Server is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker to elevate privileges over a network. The root cause is a link following issue in how SQL Server resolves file links prior to access. Per the assigned CVSS...

CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limitado a través de la página "Proxy Error" en Apache HTTP Server En Apache HTTP Server 2.4.0-2.4.39, se informó de un problema limitado de cross-site scripting que afectaba a la página de error de modproxy. Un atacante podía provocar que el enlace de la pági...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox 7.0.16 之前版本存在本地权限提升漏洞，攻击者可通过符号链接跟随实现任意文件删除和任意文件移动。 VirtualBox 尝试以 NT AUTHORITY\SYSTEM 权限将 C:\ProgramData\VirtualBox（所有用户均可写入）中的日志文件按序号备份，但最多保留 10 个日志。VirtualBox 还会尝试以 NT AUTHORITY\SYSTEM 权限删除第 11 个日志，这暴露了两个导致权限提升的漏洞。发现这个漏洞的过程非常有趣 : 任意文件删除...

CVE-2026-46552

CVE-2026-46552 NocoDB 共享基础链接可能邀请真实基础成员并在共享撤销后依然存活 简介 我在审查 NocoDB 时发现了这个问题，出发点是一个简单的安全问题： 公共共享基础链接能否跨越临时共享访问的边界，进入真实的认证基础成员身份？ 在这个案例中，答案是肯定的。 一个仅由 xc-shared-base-id 认证的共享基础会话，在 ACL 层面被当作普通的基础查看者。由于查看者权限仍然覆盖了成员管理端点，拥有共享基础 UUID 的用户可以枚举现有的基础成员，并邀请任意邮箱地址成为该基础的真实成员。...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows Shell Spoofing Vulnerability

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

Windows NTFS Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

Windows Update Stack Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

Windows NTFS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...

Blind-Trust-CVE-2024-21413-Research

BLIND TRUST - Moniker Link Phishing Engagement Framework Un marco de herramientas de seguridad para simular campañas de phishing dirigidas utilizando la vulnerabilidad CVE-2024-21413 Moniker Link. Diseñado para operaciones de equipo rojo autorizadas, pruebas de penetración y concienciación en...

CVE-2026-82592

D-Link 路由器 DIR-825M - /boafrm/formDiskFormat 中的缓冲区溢出 漏洞详情 详细信息 字段| 值 ---|--- 厂商| D-Link 产品| D-Link DIR-825M（以及共享同一固件代码库的其他型号） 受影响版本| 固件 v1.1.8 漏洞类型| 基于栈的缓冲区溢出（CWE-121）、命令注入（CWE-78） 厂商主页| https://www.dlink.com/ 漏洞描述 在对路由器固件进行安全审查时，在 /boafrm/formDiskFormat 端点中发现了一个严重漏洞。 该漏洞位于处理分区格式化的 sub46725C...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

CVE-2026-77806

root@kitploit: exp.py link instruction scan.py link...

CVE-2026-43971

A flaw was found in ninenines cowlib. This vulnerability, due to improper encoding or escaping of output, allows an attacker to perform Link header directive smuggling. By manipulating the target URI, 'rel' value, or attribute keys in applications that process Link headers through cowlib, a remot...

CVE-2026-11834

CVE-2026-11834 PoC RCE no autenticado en la opción 66 de DHCP de TP-Link CVE-2026-11834 Resumen Una vulnerabilidad de inyección de comandos CWE-78 en el manejo de la opción 66 de DHCP "TFTP Server Name" del firmware de los routers TP-Link permite a un atacante no autenticado en el mismo segmento ...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP 缓冲区溢出远程代码执行 概述 CWMP（TR-069）中的栈缓冲区溢出导致远程代码执行。 字段| 值 ---|--- 产品| TP-Link AX10, AX1500 受影响版本| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC" E -- F"ret2libc" F -- G"system" G -- H"RCE" 技术细节 漏洞存在于 cwmp 进程处理...