141202 matches found
CVE-2021-41773
CVE-2021-41773 — PoC: modcgi 経由の Path Traversal + RCE 管理された自分専用の環境でのみ使用すること。許可なくシステムに対して使用しないこと。 説明 Apache HTTP Server 2.4.49 に存在する脆弱性 CVE-2021-41773 を実証・理解するために開発された PoC です。 この欠陥は apnormalizepath 関数にあり、URL エンコードされた文字を適切に検証していませんでした。これにより、攻撃者はエンコードされた文字列（../ の代わりに %2e%2e%2f）を使うことで DocumentRoot...
AZL-106353 CVE-2026-98255 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
DEBIAN-CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98201
In the Linux kernel, the following vulnerability has been resolved: Input: zero ffeffect before compat copy in inputffeffectfromuser In the compat path inputffeffectfromuser aliases the caller's native struct ffeffect with the smaller struct ffeffectcompat and copies only the compat sized prefix:...
CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
UBUNTU-CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2021-41773-Apache-Lab
CVE-2021-41773 — Apache HTTP Server 2.4.49 ラボ Apache HTTP Server 2.4.49 のパストラバーサル脆弱性 CVE-2021-41773 の再現。 このプロジェクトは、Docker を使用して隔離された脆弱な環境を作成し、Python の PoC を使用して制御されたファイル開示を実証します。 安全上の注意: この PoC は localhost、127.0.0.1、または ::1 のターゲットのみを受け付けます。テストは隔離されたラボ内でのみ実施してください。 目的 このプロジェクトは以下を実証します: Docker で...
CVE-2026-98318 smb: client: validate absolute native symlink targets before NT fixups
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying t...
CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98255 tcp: exclude old ACKs from tcp fast path
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
EUVD-2026-93183
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98255
The Linux kernel contains a vulnerability where old Acknowledgements (ACKs) could bypass the fast path of the TCP stack. Specifically, ACKs before SND.UNA and after SND.NXT were not being properly validated, potentially allowing them to modify connection state or advance RCV.NXT prematurely. The ...
CVE-2026-98255 tcp: exclude old ACKs from tcp fast path
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-
事件响应报告：TeamCity 被入侵 CVE-2024-27198 分析者： Belal Abdelsalam 日期： 2026年7月 实验室/环境： CyberDefenders JetBrains 📄 行政摘要 本文档记录了对一台受入侵的 JetBrains TeamCity 服务器（版本 2023.11.3）的取证分析。通过分析提供的网络数据包捕获文件（.pcap），调查确认外部威胁行为者利用路径遍历漏洞（CVE-2024-27198）绕过了身份验证机制。攻击者随后上传了一个包含 Java 服务器页面（JSP）Webshell...
CVE-2026-104982
A flaw was found in Xreader. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted electronic publication EPUB document. Due to improper path sanitization in the EPUB file handler, the application is susceptible to path traversal, potentially leading to...
path-traversal-CVE-2026-14628
Path Traversal Demo - ケーススタディ : CVE-2026-14628 最近公開された CVE-2026-14628 を実世界の参照点として用いた、パストラバーサルCWE-22 脆弱性クラスの最小限で実行可能なデモです。 実際の脆弱性 CVE-2026-14628 は 'NousResearch/hermes-agent' 2026.5.16 に影響します。 gateway/platforms/base.py の extractmedia 関数は、受信した Webhook...
CVE-2026-40022
camel-platform-http-main 非根上下文路径上的身份验证绕过 CVE-2026-40022 该项目演示了 Apache Camel 的 camel-platform-http-main 组件（Camel main 运行时的嵌入式 HTTP/管理服务器）中的一个身份验证绕过 漏洞，跟踪编号为 CVE-2026-40022 。当启用身份验证并配置了非根上下文路径（例如 /api 或 /admin）时，身份验证处理器仅覆盖确切的上下文路径，因此对子路径 的未经身份验证的请求可以到达受保护的路由和管理端点。...
Path Traversal
Apache MINA SSHD is vulnerable to path traversal. The vulnerability is due to insufficient path validation on Windows, where the sshd-git component fails to properly restrict file system paths and an authenticated remote user can craft directory traversal sequences to access git repositories...
CVE-2026-25057
CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...