375 matches found
CVE-2023-38408
OpenSSH の脆弱性 - CVE-2023-38408 📚 はじめに OpenSSH 9.3p2 より前のバージョン に脆弱性が発見されました。OpenSSH の ssh-agent における PKCS11 機能は、検索パスが十分に信頼できないため、エージェントが攻撃者制御のシステムに転送されるとリモートコード実行につながります /usr/lib 内のコードは ssh-agent にロードしても必ずしも安全ではありません。この欠陥により、サーバー上の転送されたエージェントソケットを制御し、クライアントホストのファイルシステムに書き込む権限を持つ攻撃者は、ssh-agent...
CVE-2025-55182
CVE-2025-55182 RCE 個人用チェックツールです。CVE-2025-55182の脆弱性をチェックするために使用します。 脆弱性の原理 React Server Components は、サーバー関数エンドポイントに送信されたペイロードをデコードする際に、パス解決の欠陥が存在します。コロンでオブジェクトのプロパティを区切ることでネストした値の取得を実現します（例: $1🅰️b は "a":"b":"foo".a.b に対応）が、プロパティの存在性の検証は行われません。$1🅰️a が渡されると、.a.a の無効な値の取得がトリガーされ、サーバー側で 500...
CVE-2026-32202
零点击强制认证：查看带有特制 .lnk 的文件夹会在图标渲染期间触发 UNC 解析，迫使受害者向攻击者指定的地址发起出站连接，从而泄露（并允许中继）其 Net-NTLMv2 凭据。该漏洞源于 CVE-2026-21510 的补丁不完整：Microsoft 添加的信任验证仅在 ShellExecuteExW 调用时、即调用阶段生效，但在 CControlPanelFolder::GetUIObjectOf 执行时损害已经造成，而该函数在任何 ShellExecute 信任验证发生之前就被调用了。 Explorer 调用 CControlPanelFolder::GetUIObjectOf...
CVE-2025-33053-Checker-PoC
CVE-2025-33053 脆弱性チェッカー＆概念実証 PoC チェッカーの証明 PoCの証明 Windows システムに影響を与える、WebDAV ベースの重要なリモートコード実行 RCE 脆弱性 CVE-2025-33053 の悪用可能性をチェックし、実証するためのツール一式です。 📌 CVE-2025-33053 について CVE-2025-33053 は、攻撃者が悪意のあるリモート WebDAV 共有を参照する .LNK ショートカットファイルを悪用し、影響を受けるシステム上でリモートコード実行 RCE を引き起こす可能性を許容します。 脆弱性の条件： 対象に WebClien...
cve-2024-32002-poc
💥 CVE-2024-32002 – Git Submodule Path Injection PoC 動機 Hack The Box プラットフォームの Compiled マシンを攻略中に、Git とサブモジュールに関する興味深い動作に遭遇しました。さらに調査を進めると、研究者 Amal Murali による この優れた記事 を見つけました。そこには .gitmodules を介したパスインジェクション手法が詳述されています。これをきっかけに、CVE-2024-32002 を研究し、この脆弱性の実際の影響を示す実用的な PoC を作成することにしました。 🧠 脆弱性の概要...
cve-2024-32019-PoC
CVE-2024-32019 — Escalada de privilegios local en ndsudo de Netdata Resumen El helper ndsudo de Netdata instalado con setuid root restringe qué comandos ejecutará, pero resuelve esos comandos usando elPATH del invocador. En las versiones afectadas, un usuario local puede colocar un binario...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
susvibes-jupyter-server-cve-2026-35397
SusVibes 基准测试任务：Jupyter Server 内容路径解析 本仓库包含一个完整的 SusVibes 风格基准测试任务，该任务基于 Jupyter Server 中一个真实的上游 Python 安全修复构建。 该任务旨在评估代理是否能够仅凭普通的 GitHub issue 风格提示重新实现被遮蔽的内容路径解析行为，而无需告知其原始上游变更修复了一个漏洞。功能测试检查普通的文件行为，而隐藏的安全测试则检查实现是否保留了根目录边界。 提交摘要 要求| 状态| 证据 ---|---|--- 真实 Python 安全修复| 完成|...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Rocky Linux 9 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource (crlsa-2026_70191)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202670191 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 Tenable has extracted the preceding description bloc...
CLEANSTART-2026-GN07707 Previously, resolving relative paths containing parent directory ('
Security vulnerability affects the minio-operator package. Previously, resolving relative paths containing parent directory '...
AlmaLinux 9.6 [TuxCare] Security Update: git-lfs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789464832)
The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789464832 advisory. - Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. CVE-2026-3381...
Rocky Linux 9.6 [TuxCare] Security Update: git-lfs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789464832)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789464832 advisory. - Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...