9 matches found
CVE-2026-88014
rclone versions 1.72.0 through 1.75.1 are affected by a Zip Slip vulnerability in the archive ZIP backend ((*Fs).readZip in backend/archive/zip/zip.go). The method accepts archive/zip.File.Name values from an untrusted central directory and exposes cleaned entry names without verifying they remai...
CVE-2026-88014 rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...
CVE-2026-72640
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
GHSA-699M-4V95-RMPM lakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access
Summary Two path traversal vulnerabilities in the local block adapter allow authenticated users to read and write files outside their designated storage boundaries. Details The local block adapter in pkg/block/local/adapter.go had two path traversal vulnerabilities: 1. Prefix Bypass Vulnerability...
Exploit for OS Command Injection in Docker
!DOIhttps://img.shields.io/badge/DOI-10.5281%2Fzenodo.183047...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001402)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001402 advisory. An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004447)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004447 advisory. An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount...
