CVE-2026-21436

CVE-2026-21436 eopkg = 4.3.4, the Solus OS package manager, writes files containing absolute paths in package contents directly to the specified directory during the installation of packages with the .eopkg extension. Even if the --destdir parameter, used to install the package to a specific...

dirtyfrag-patches

Dirty Frag — Kernel Patches Patch series for the Dirty Frag vulnerability class discovered by Hyunwoo Kim @v4bel. Dirty Frag allows an unprivileged local user to overwrite arbitrary bytes of the page cache of read-only files e.g. /usr/bin/su, /etc/passwd leading to local privilege escalation to...

CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Insecure Log Handling Overview CVE-2025-27591 is a local privilege escalation vulnerability in the below utility versions prior to the patched release caused by insecure symbolic link handling within its logging mechanism. Attackers with local access can...

CVE-2026-107377

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAKIMPORTPATTERN and consumed by writemissingweakimports in...

CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust 1.85+: cargo buil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

NodeJS-Tar-Symlink-Exploit-CVE-2026-29786

📦 CVE-2026-29786: Node.js Tar Symlink Vulnerability -yellow 📌 Executive Summary This repository documents research into CVE-2026-29786 , a high-severity vulnerability discovered in the popular Node.js tar package. The flaw allows an attacker to create a malicious tar archive that, when extracted,...

Copy-Fail

CVE-2026-31431 – "Copy Fail" Reachability Checker A simple, safe Python script that determines whether a Linux system is vulnerable to CVE-2026-31431 "Copy Fail", a local privilege escalation that affects all major distributions since kernel 4.14. ⚠️ What is Copy Fail? CVE-2026-31431 is a...

CVE-2026-31802

CVE-2026-31802: tar Symlink Path Traversal / Arbitrary File Overwrite Research: Joshua van Rijswijk Description This repository contains my proof of concept and write-up for CVE-2026-31802 , a high-severity vulnerability in the npm tar package node-tar affecting versions = 7.5.10. I found that ta...

CVE-2026-23745

CVE-2026-23745: node-tar Arbitrary File Overwrite Research: Joshua van Rijswijk Description PoC for CVE-2026-23745 , a high-severity path traversal vulnerability in node-tar 7.5.2. The library fails to sanitize absolute paths in the linkpath field for Hardlinks and Symlinks. This allows malicious...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3 . The issue is located in lib/decompress-zip.js, where the software improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive with entries resolving to prefix-sibling directories can ca...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

EUVD-2026-95103

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS

Impact The cookie store ignores the scheme a Set-Cookie arrived on. draft-ietf-httpbis-rfc6265bis-22 approved to obsolete RFC 6265, in the RFC Editor queue Section 5.7 requires a user agent to ignore a cookie with the Secure attribute unless it arrived over a secure connection step 13, and to...

EUVD-2026-42895

PraisonAI: Project config can auto-save agent output outside the project root...

CVE-2026-53365

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK Zero-Copy Reference Count Underflow, Page-Cache Overwrite Privilege Escalation HackSpeak distribution mirror. This repository is a distribution mirror of MaherAzzouzi/vsockdrop , with code identical to upstream; upstream does not include a LICENSE, so...

ghostlock-custom

GhostLock Custom — CVE-2026-43499 Adaptation A GhostLock CVE-2026-43499 privilege escalation exploit targeting non-Android Linux 6.x ARM64 kernels. Kernel Characteristics Item| Value ---|--- Architecture| ARM64 AArch64 VABITS| 39 KIMAGETEXTBASE| 0xffffffc008000000 Kernel version| 6.x SELinux| Non...

security-research

Security Research A collection of files related to my personal security research. Additional content will be posted on my blog https://blog.mirch.io. Tools Tool| Description ---|--- openssldircheck| Windows utility to check for potential insecure paths used by the OPENSSLDIR build parameter in...

sploits

sploits | Code| Description ---|---|--- CVE-2018-4310| code| MediaRemote: An access issue was addressed with additional sandbox restrictions CVE-2018-4991| code| Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation...