889 matches found
Elastic Cloud Enterprise backlink vulnerability
Versions 2.6.0 through 3.8.5 and 4.0.0 through 4.2.0 of Elastic Cloud Enterprise contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access; it may allow unauthorized disclosure and loss of data from other deployments on the same host via symbol...
HashiCorp Nomad backlink vulnerability
Versions prior to HashiCorp Nomad 2.1.0 and HashiCorp Nomad Enterprise 2.1.0 contain a post-link vulnerability. This vulnerability stems from a symbolic link traversal issue during data migration by the same client, which may allow malicious workloads to modify host directories’ permissions and...
Elastic Cloud Enterprise backlink vulnerability
Versions 1.0.0 through 3.8.5 and 4.0.0 through 4.2.0 of Elastic Cloud Enterprise contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access; it is susceptible to symbolic link attacks and may lead to authentication bypass as well as unauthorized...
HashiCorp Nomad backlink vulnerability
HashiCorp Nomad and HashiCorp Nomad Enterprise versions 0.3.0 through 2.1.0 contain a post-link vulnerability. This vulnerability stems from a symbolic link traversal issue during dispatch payload and executor log writing, potentially allowing malicious workloads to modify files outside their...
Elastic Cloud Enterprise backlink vulnerability
Versions 4.1.0 through 4.2.0 of Elastic Cloud Enterprise contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access and may allow symbolic link attacks, leading to unauthorized reading and writing of data on other deployments on the same host...
Juniper Networks Session Smart Router backlink vulnerability
Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.0 through 7.1.7, and versions 7.2.0 through 7.2.3, as well as Juniper Networks Session Smart Conductor versions prior to 7.0.5, 7.1.0 through 7.1.7, and 7.2.0 through 7.2.3, contain a post-link vulnerability. This...
Bytecode Alliance wasmtime post-link vulnerability
Bytecode Alliance: Versions prior to 36.0.18, 37.0.0 through 48.0.6, and 49.0.0 through 49.0.3 contain a post-link vulnerability. This vulnerability arises because wasmtime-wasi reattaches trailing slashes to renamed source paths, causing renameat directories on macOS and FreeBSD hosts to follow...
Tanium endpoint configuration toolset solution post-link vulnerability
Versions prior to 1.51.60 of the Tanium endpoint configuration toolset, versions prior to 1.59.50 of the 1.59.x series, and versions prior to 1.71.25 of the 1.71.x series contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access, potentially...
Red Hat OpenShift post-link vulnerability
Red Hat OpenShift Container Platform version 4 contains a post-link vulnerability. This vulnerability arises because when using oc image extract to extract container images, the OpenShift client fails to properly remove symbolic links and hard link targets pointing to absolute paths or directorie...
Bytecode Alliance wasmtime post-link vulnerability
Versions of Wasmtime prior to 24.0.13, from 25.0.0 up to versions prior to 36.0.14, from 37.0.0 up to versions prior to 46.0.3, and from 47.0.0 up to versions prior to 47.0.4 contain a post-link vulnerability. This vulnerability arises because cap-std’s dependency fails to properly handle symboli...
Microsoft VM Inspector for Azure Virtual Machines post-link vulnerability
The Microsoft VM Inspector for Azure Virtual Machines contains a post-link vulnerability stemming from improper link resolution prior to file access “link following”, which may allow unauthorized attackers to escalate privileges over the network...
Python Packaging Authority virtualenv post-link vulnerability
The Python Packaging Authority identifies a post-link vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because ViaTemplateActivator.generate deletes existing outputs only when Path.exists returns true. As a result, empty symbolic links can persist and redirect...
Python Packaging Authority virtualenv post-link vulnerability
The Python Packaging Authority identifies a post-link vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because the built-in creator calls ensuredir when handling executable files, libraries, and package directories; it accepts existing symbolic links pointing to...
Pulseaiclub phi backend link vulnerability
The PulseAIClub phi version 0.1.1 to 0.28.4 has a post-link vulnerability. This vulnerability arises from improper link resolution; the permission check only performs lexical path checks. Malicious repositories can exploit this to bypass the workspaceonlywrites restriction. By submitting symbolic...
BusyBox post-link vulnerability
BusyBox has a post-installation link vulnerability. This vulnerability stems from the tar applet’s delayed handling of symbolic links and hard links. It does not verify whether the target file still resides within the extracted directory after the link is created. An attacker can create a symboli...
CVE-2026-28672
creationtimestamp| type| source ---|---|--- 2026-08-10 10:59:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5if5ljlxwuhwj 2026-08-12 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvkyosmvz26...
CVE-2026-67622
creationtimestamp| type| source ---|---|--- 2026-08-09 16:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnxegt2qg2h 2026-08-10 17:18:10+00:00| seen| https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649...
CVE-2026-71993
creationtimestamp| type| source ---|---|--- 2026-08-09 00:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmctj6fur2q 2026-08-09 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117062960952906332 2026-08-09 01:30:30+00:00| seen|...
CVE-2026-15257
creationtimestamp| type| source ---|---|--- 2026-08-08 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslv7c4uaq2i 2026-08-09 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnyb3cao62a...