CVE-2026-12345

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

CVE-2026-102242

Improper link resolution CWE-59 / CWE-22 in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path...

CVE-2026-102242 Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases

Improper link resolution CWE-59 / CWE-22 in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path...

EUVD-2026-89186

Improper link resolution CWE-59 / CWE-22 in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated attacker with tool execution permissions to bypass directory boundary restrictions via symbolic links. Because path...

CVE-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

EUVD-2026-89183

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

netgear_r6700v3_circled

Explotando un desbordamiento de búfer en la pila en el NETGEAR R6700v3 CVE-2022-27646 con la ayuda de la Ejecución Simbólica Introducción Este repositorio tiene como objetivo demostrar algunas funcionalidades de Morion, una herramienta de prueba de concepto PoC para experimentar con ejecución...

SEP-14.2-Arbitrary-Write

CVE-2020-5837 漏洞利用程序 相关分析文章可在 RedyOps Labs 的博客中找到： https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ 第三方工具 此漏洞利用代码大量基于 James Forshaw 开发的 symboliclink-testing-tools。symboliclink-testing-tools 可在以下地址找到：...

Triton

Triton 是一个动态二进制分析库。它提供了内部组件，允许您构建程序分析工具， 自动化逆向工程、进行软件验证或仅仅是模拟代码。 动态 符号 执行 动态 污点 分析 x86 、x86-64 、ARM32 、AArch64 和 RISC-V 32/64 ISA 语义的 AST 表示 表达式 合成 SMT 简化 过程 将代码提升 到 LLVM 以及 Z3 并反向 SMT求解器 接口支持 Z3 和 Bitwuzla C++ 和 Python API 由于 Triton 是一个兼职性质的项目，如果不完全可靠，请不要责怪我们 。提出问题 或 提交拉取请求 总是比嘲讽更好...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox anterior a 7.0.16 es vulnerable a una escalada de privilegios local mediante el seguimiento de enlaces simbólicos que conduce a la eliminación arbitraria de archivos y al movimiento arbitrario de archivos. VirtualBox intenta mover archivos de registro como NT...

aether

Aether v6.0 — Marco de análisis de seguridad de contratos inteligentes Versión 6.0 | Novedades en v6.0 | Registro de cambios Aether es un marco basado en Python para analizar contratos inteligentes Solidity, generar hallazgos de vulnerabilidades, producir pruebas de concepto PoC basadas en Foundr...

VMDragonSlayer

VMDragonSlayer 项目将于10月中旬公开，重构进行中 先进的虚拟机检测与分析框架 VMDragonSlayer 是一个用于分析受虚拟机（VM）保护器（如 VMProtect 2.x/3.x、Themida 以及自定义恶意软件 VM）保护的二进制文件的综合框架。该框架结合了动态污点跟踪（DTT）、符号执行（SE）、模式分类和机器学习等多种分析引擎，以自动化逆向工程过程。 目标 ：将复杂的受保护二进制分析从数周/数月的人工工作转变为结构化、自动化的分析，并提供可解释的结果。 主要特性 多引擎分析 ：结合静态、动态和混合分析技术 VM 检测 ：自动检测商业和自定义 VM 保护器...

aethel_core

Aethel-Core: Automated Cognitive Defense & Cyber Threat Simulation WAF A hybrid cybersecurity framework built in SWI-Prolog , designed for real-time threat mitigation and generating structured logic datasets for LLM Instruction Tuning and Neuro-Symbolic AI Training. Key Innovations & Architecture...

Angora

Angora Angora es un fuzzer guiado por cobertura basado en mutaciones. El objetivo principal de Angora es aumentar la cobertura de ramas resolviendo restricciones de rutas sin ejecución simbólica. Trabajo Publicado Arxiv: Angora: Efficient Fuzzing by Principled Search, S&P 2018. Compilar Angora...

CVE-2023-36723

CVE-2023-36723 This is PoC for arbitrary directory creation bug in Container Manager service. This PoC is not thoroughly tested so it may not even work most of the time it was enough for msrc to confirm vulnerability. In order to exploit this vulnerability a Windows Sandbox feature have to be...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.3, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

lightbulb-framework

LightBulb LightBulb 是一个用于审计 Web 应用防火墙和过滤器的开源 Python 框架。 概览 该框架包含两个主要算法： GOFA ：一种主动学习算法，在标准成员/等价查询模型中推断自动机的符号表示。 主动学习算法允许远程分析过滤器和消毒程序，即仅通过查询目标程序并观察输出来进行分析。 SFADiff ：一种基于符号有限自动机（SFA）学习的黑盒差分测试算法。 寻找功能相似的程序之间的差异是一个重要的安全问题，因为这些差异可用于指纹识别或创建针对安全软件（如 Web 应用防火墙，WAF）的规避攻击，这类软件旨在检测对 Web 应用的恶意输入。 快速安装...

CVE-2020-1066-EXP

引用 这个漏洞属于Windows CardSpace服务未正确处理符号链接对象导致的任意文件替换的本地权限提升漏洞 申明 作者poc仅供研究目的,如果读者利用本poc从事其他行为,与本人无关 目录 toc 分析 漏洞影响范围 适用于Windows7和Windows Server 2008 R2的普通用户和开启特殊配置的IIS用户 漏洞原理分析 笔者是漏洞的提交者,漏洞更新于2020年5月.漏洞来自于Windows7和Windows Server 2008 R2的Windows...

ManticoreUI

Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore Manticore 用户界面（MUI）项目为不同的反汇编器提供了一个图形用户界面插件，使用户能够轻松交互并查看 Manticore 符号执行引擎 在分析智能合约和原生二进制文件时的进度。 我们正在为 Binary Ninja 和 Ghidra 开发 MUI...