CVE-2026-20841

The accuracy of this PoC trigger method has not been verified, and it should be considered informational/reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Test on : Notepad Version 11.2510.14.0 step 1 : Save File step 2 : Open file Note: It does prompt to open progr...

CVE-2017-1000117

CVE-2017-1000117 Project Introduction One of the selected topics for the cybersecurity course project Reproduction of CVE-2017-1000117 vulnerability PoC + Exploit Git + SSH Vulnerability Introduction: Vulnerability Name: Git command injection vulnerability CNNVD ID: CNNVD-201708-670 Hazard Level:...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

CVE-2026-121614 Docker Sandboxes host Git executes repository-controlled programs

Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands. An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox with the repository mounted read-write,...

CVE-2026-119287

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...

CVE-2026-119287

The Zuke build automation system for Deno (versions prior to 1.51.0 ) contains a vulnerability in the @zuke/core MCP registry mode. The system fails to apply the ZUKE_REGISTRY_LAUNCH_HOSTS authorization when processing command-form registry descriptors. If a run-capable caller invokes a tool from...

CVE-2026-119287

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...

CVE-2026-119287: zuke-build zuke: Zuke is a code-first, strongly typed build automation system for Deno

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...

FreeBSD : git-lfs -- multiple vulnerabilities (cacb4538-d2d0-11f1-8062-64bc58adb10f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cacb4538-d2d0-11f1-8062-64bc58adb10f advisory. The Git LFS project reports: This release introduces security fixes for four vulnerabilities...

git-lfs -- multiple vulnerabilities

The Git LFS project reports: This release introduces security fixes for four vulnerabilities that have been assigned the identifiers CVE-2026-69260, CVE-2026-69261, CVE-2026-105802, and CVE-2026-105803. These vulnerabilities apply to all of the operating systems supported by Git LFS...

SUSE CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

Astra Linux – vulnerability in mtr

In certain privileged contexts, mtr runs up to version 0.95 mishandles the execution of programs specified by the MTRPACKET environment variable. NOTE: On macOS, mtr often has Sudo rules, which is an indirect result of Homebrew failing to install setuid binaries...

CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025

PeaZip 11.2.0 and earlier on Windows is vulnerable to a Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas). An attacker can craft an archive with a malicious entry name (e.g., using .. sequences) that, when previewed via the "Preview with... -> Associa...

CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

EUVD-2026-102023

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

CVE-2026-104025: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...