CVE-2020-1283_Windows-Denial-of-Service-Vulnerability

CVE-2020-8103 エクスプロイト 解説記事はRedyOps Labsのブログにあります: https://labs.redyops.com/index.php/2020/04/27/dos-via-arbitrary-folder-creation/ サードパーティツール このエクスプロイトコードは、James Forshawによって開発されたsymboliclink-testing-toolsをベースにしています。symboliclink-testing-toolsは以下から入手できます:...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Rsync file transfer and synchronization utility lies in its reliance on UNIX symbolic links for tracking files. This allows a malicious actor to read arbitrary files.

The vulnerability of the Rsync file transfer and synchronization utility is related to the tracking of symbolic links in UNIX. Exploiting this vulnerability could allow an attacker to read arbitrary files...

The vulnerability of the Rsync file transfer and synchronization utility lies in the improper handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin version 805.vfc79344957d and earlier contains a path traversal vulnerability. The library Pipeline step does not restrict the provided path to a relative path inside the SCM checkout and follows symbolic links to locations outside it. This allows attacker...

EUVD-2026-80755

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Microsoft Defender ローカル権限昇格 LPE BlueHammer は、Windows システム上の Microsoft Defender コンポーネントに影響を与える高深刻度のローカル権限昇格脆弱性です。 この欠陥により、低権限の攻撃者がファイルシステムの競合状態と特権的な Defender 操作を悪用して NT AUTHORITY\SYSTEM に権限を昇格できます。 📌 概要 🧠 BlueHammer とは？ BlueHammer は、特権的な Microsoft Defender 操作内の...

CVE-2024-23334

CVE-2024-23334 Aiohttp = !IMPORTANT このスクリプトは教育目的のみを意図しています。 不正利用は固く禁止されています。 実行方法 root@kitploit: $ git clone https://github.com/wizarddos/CVE-2024-23334 $ cd CVE-2024-23334 $ python3 exploit.py -u url -f file -d static directory !Note URL と静的ディレクトリのスラッシュを一致させることを忘れないでください。http://127.0.0.1/...

Astra Linux – Vulnerability in Git

Git is a version control system. Before versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories containing submodules could be exploited through a bug in Git. This bug allowed a script to be written into the .git/ directory instead of the submodule’s worktree. This enabl...

CVE-2022-42917

A flaw was found in FRRouting FRR. A local service user can exploit a Time-of-check to time-of-use TOCTOU race condition by monitoring the configuration directory and replacing configuration files with symbolic links during their creation. This manipulation allows the user to change the ownership...

git_rce

git cloneを介したRemote Code Execution攻撃 CVE-2024-32002 貢献者 イ・ジョンウ@Roronoawjd 背景説明 本脆弱性は、大文字小文字を区別しないWindowsやMacOSなどのファイルシステムにおいて、サブモジュールを含むgitリポジトリをcloneする際に発生するRCERemote Code Execution脆弱性です。RCEはリモートコード実行脆弱性であり、攻撃者が対象システム上で任意のコマンドを実行できる非常に深刻な脆弱性です。 A/modules/x と a/modules/x...

php: PHP: Denial of Service via circular symbolic links in phar archives

A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...

CVE-2026-70622

A flaw was found in tar-rs. This vulnerability, a symlink escape, allows a local attacker to read sensitive files outside of the intended directory. By planting specially crafted symbolic links in an untrusted directory, an attacker can trick a privileged process, when archiving that directory,...

RockyLinux 9 : php:8.2 (RLSA-2026:61903)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61903 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...

php: PHP: Denial of Service via circular symbolic links in phar archives

A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...

CVE-2026-17106

A flaw was found in moby/go-archive. The tar extraction routines in the component do not properly restrict filesystem operations to the intended destination directory. An attacker who controls the contents of an archive can exploit this by including symbolic links, allowing them to create or...

php: PHP: Denial of Service via circular symbolic links in phar archives

A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...

USN-8691-1: attr vulnerability

It was discovered that attr incorrectly handled symbolic links while traversing directory paths. A local attacker who controlled a pathname component could possibly use this issue to redirect privileged attr operations to arbitrary files and gain elevated privileges...

ALSA-2026:61259 Low: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Servic...