flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

CVE-2017-1000117

CVE-2017-1000117 Project Introduction One of the selected topics for the cybersecurity course project Reproduction of CVE-2017-1000117 vulnerability PoC + Exploit Git + SSH Vulnerability Introduction: Vulnerability Name: Git command injection vulnerability CNNVD ID: CNNVD-201708-670 Hazard Level:...

CVE-2026-20841

The accuracy of this PoC trigger method has not been verified, and it should be considered informational/reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Test on : Notepad Version 11.2510.14.0 step 1 : Save File step 2 : Open file Note: It does prompt to open progr...

SUSE CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025

PeaZip 11.2.0 and earlier on Windows is vulnerable to a Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas). An attacker can craft an archive with a malicious entry name (e.g., using .. sequences) that, when previewed via the "Preview with... -> Associa...

EUVD-2026-102023

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

PT-2026-114910

Path Traversal CWE-22 in the execute obj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-109556 EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC

EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview...

CVE-2026-107732

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

CVE-2026-107732

The multi-format reader SumatraPDF for Windows (version 3.6.1 and earlier ) is vulnerable to markup/command-link injection . The issue occurs because untrusted document paths and PDF link targets are interpolated into notification text, which the ParseTip() function interprets as trusted tip mark...

CVE-2026-107732 SumatraPDF: Markup/command-link injection into UI notification text

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

CVE-2026-107732 SumatraPDF: Markup/command-link injection into UI notification text

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_69123)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669123 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly from the...

Rocky Linux 10.2 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_68692)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202668692 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Bug Fixes and Enhancements: Use canonicalized path if user path...