CVE-2018-1000117-Exploit

CVE-2018-1000117 Python Software Foundation の CPython バージョン 3.2 から 3.6.4 Windows には、Windows 上の os.symlink 関数にバッファオーバーフローの脆弱性が存在し、任意のコード実行、おそらく権限昇格につながる可能性があります。この攻撃は、攻撃者が制御する名前または場所を持つシンボリックリンクを作成する Python スクリプトを介して悪用可能と思われます。この脆弱性はバージョン 3.7.0 および 3.6.5 で修正されたようです。 脆弱なバージョン root@kitploit: Python...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

CVE-2026-44881: Improper Link Resolution Before File Access

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying stacks from Git repositories. When a...

EUVD-2018-1844

Malware in sbrugna...

Python Software Foundation CPython on Windows Buffer Overflow Vulnerability

Python Software Foundation CPython on Windows is the Python Software Foundation's suite of Windows-based, open-source, object-oriented programming languages that are extensible, support modules and packages, and support multiple platforms.CPython also known as Python is a Python interpreter...

Buffer overflow

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

CVE-2018-1000117

CVE-2018-1000117 affects CPython on Windows: buffer overflow in os.symlink() from Python 3.2–3.6.4 can enable arbitrary code execution with privilege escalation; exploit via attacker-controlled symlink. Fixed in Python 3.6.5 and 3.7.0. Upgrade to these or later to remediate.