417 matches found
cve-2024-32002-poc
💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivation While solving the Compiled machine on the Hack The Box platform, I came across a curious behavior involving Git and submodules. Upon investigating further, I found this excellent post by researcher Amal Murali, which details a path...
CVE-2025-55182
CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...
CVE-2023-38408
OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...
susvibes-jupyter-server-cve-2026-35397
SusVibes Benchmark Task: Jupyter Server Contents Path Resolution This repository contains one complete SusVibes-style benchmark task built from a real upstream Python security fix in Jupyter Server. The task is designed to evaluate whether an agent can reimplement masked contents path-resolution...
CVE-2025-33053-Checker-PoC
CVE-2025-33053 Vulnerability Checker & Proof-of-Concept PoC Checker Proof PoC Proof A complete set of tools to check and demonstrate potential exploitation of CVE-2025-33053 , a critical WebDAV-based Remote Code Execution RCE vulnerability affecting Windows systems. 📌 About CVE-2025-33053...
cve-2024-32019-PoC
CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation Summary Netdata’s ndsudo helper installed setuid root restricts which commands it will run, but resolves those commands using the caller’sPATH. In impacted versions, a local user can place a malicious binary earlier in PATH and have ndsud...
CVE-2026-32202
Zero-click forced authentication: viewing a folder with the crafted .lnk triggers UNC resolution during icon render, coercing the victim into an attacker-directed outbound connection that leaks and enables relay of their Net-NTLMv2 credentials. Emerged due to an incomplete patch of CVE-2026-21510...
CVE-2025-24054
Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure 🎥 Demonstration POC + March 2025 Patch bypass 🎥 patch bypass Click the image above to watch the vulnerability demonstration 📋 Technical Overview This repository provides a comprehensive research framework analyzing the vulnerability chai...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities
Summary IBM Guardium Data Security Center has addressed these vulnerabilties in an update. Vulnerability Details CVEID:CVE-2026-78662 DESCRIPTION: Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2026-112946
A flaw was found in Vite. On network-accessible development servers, improper path resolution during import analysis can cause root-relative paths to be incorrectly marked as safe module paths. An unauthenticated remote attacker can exploit this issue by requesting specially crafted paths that...
CVE-2026-95168
A flaw was found in thefuck. This vulnerability allows a local attacker to execute arbitrary code by supplying malicious rule files through insecure import path resolution. When the application loads rules, it evaluates code from untrusted paths, leading to unauthorized code execution with the...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed path resolution in ksmbdvfskernpathcreate. The SMB2 open lookup is rooted at the share using LOOKUPBENEATH, but the create/mkdir/hardlink logic does not use this approach. ksmbdvfskernpathcreate generates an...