CVE-2023-38408

OpenSSH の脆弱性 - CVE-2023-38408 📚 はじめに OpenSSH 9.3p2 より前のバージョン に脆弱性が発見されました。OpenSSH の ssh-agent における PKCS11 機能は、検索パスが十分に信頼できないため、エージェントが攻撃者制御のシステムに転送されるとリモートコード実行につながります /usr/lib 内のコードは ssh-agent にロードしても必ずしも安全ではありません。この欠陥により、サーバー上の転送されたエージェントソケットを制御し、クライアントホストのファイルシステムに書き込む権限を持つ攻撃者は、ssh-agent...

CVE-2025-55182

CVE-2025-55182 RCE 자가 점검 도구로, CVE-2025-55182 취약점을 점검합니다. 취약점 원리 React Server Components가 서버 함수 엔드포인트로 전송된 페이로드를 디코딩할 때 경로 해석 결함이 존재합니다. 이는 콜론으로 객체 속성을 구분하여 중첩 값 참조를 구현합니다예: $1🅰️b는 "a":"b":"foo".a.b에 해당. 그러나 속성 존재 여부 검증이 없습니다. $1🅰️a를 전달하면 .a.a의 유효하지 않은 값 참조가 발생하여 서버 500 오류를 유발합니다. 공격자는 특수하게 조작된...

The vulnerability of the path Resolve() function in the vm2 library of the NPM package manager allows a attacker to bypass the sandbox protection and execute arbitrary code.

The vulnerability of the pathResolve function in the vm2 library of the NPM package manager is related to an incorrect definition of symbolic links during file access. Exploiting this vulnerability allows a remote attacker to bypass the sandboxing mechanisms and execute arbitrary code...

GHSA-MW96-CPMX-2VGC Rollup 4 has Arbitrary File Write via Path Traversal

Summary The Rollup module bundler specifically v4.x and present in current source is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization in the core engine allows an attacker to control output filenames e.g., via CLI named inputs, manual chunk aliases, or...

Pulp Arbitrary File Overwrite Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. An arbitrary file overwrite vulnerability exists in Pulp version 2.16.x. The vulnerability stems from the program failing to properly resolve paths a...