Lucene search
+L

411 matches found

RedhatCVE
RedhatCVE
added 2026/08/27 1:09 p.m.2 views

CVE-2026-76845

A flaw was found in adm-zip, a Node.js library used for handling zip archives. This vulnerability allows a local attacker to overwrite arbitrary files on the system. When extracting an archive, adm-zip follows symbolic links, which are special files that point to other files or directories. An...

6.8CVSS0.00131EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/27 12:37 p.m.2 views

CVE-2026-49114

A flaw was found in ONNX. The saveexternaldata function is vulnerable to symlink following and path traversal. A local attacker with write access to a directory where a victim serializes external data can exploit this by pre-planting a symlink. This allows the attacker to cause the victim's write...

7.1CVSS0.00107EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/27 6:41 a.m.3 views

Fortinet_FortiClient_Exploit_CVE-2026-24018

Fortinet FortiClient एक्सप्लॉइट CVE-2026-24018 CVE-2026-24018 के लिए पूर्ण रूप से कार्यशील एक्सप्लॉइट: Fortinet FortiClientLinux 7.4.0 से 7.4.4, FortiClientLinux 7.2.2 से 7.2.12 में UNIX सिम्बोलिक लिंक Symlink अनुसरण भेद्यता, एक स्थानीय और अन-प्रिविलेज्ड उपयोगकर्ता को अपने विशेषाधिकारों को रूट तक...

7.8CVSS7.3AI score0.00228EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/27 4:30 a.m.7 views

CVE-2026-D0cker

CVE-2026-Pending: Побег из контейнера через уязвимость runC maskPaths Серьёзность: Критическая CVSS 9.8 Компонент: opencontainers/runc libcontainer Тип уязвимости: CWE-59: Неправильное разрешение ссылок перед доступом к файлу 'Link Following' 🚨 Краткое описание Критическая уязвимость существует в...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 2:27 a.m.2 views

subpath-exploit

Exemplo de Escape do Kubernetes via CVE-2017-1002101 Descrição Após ouvir sobre o problema e seguir este guia, quis explorar as coisas um pouco mais. Este repositório contém algumas implantações de pods e scripts shell auxiliares que demonstram o mecanismo de ataque da forma mais simples possível...

9.6CVSS8AI score0.11295EPSS
SaveExploits2
CVE
CVE
added 2026/08/26 7:32 p.m.10 views

CVE-2026-79939

Dell PowerProtect Cyber Recovery , versions prior to 20.3 , contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low-privileged attacker with local access could potentially exploit this flaw, leading to Script injection . The vulnerability is rated CVSS 5.8 (MEDIUM) with a vector of ...

5.8CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 7:32 p.m.6 views

EUVD-2026-66706

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

5.8CVSS5.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "È stata segnalata una vulnerabilità di follow-up dei collegamenti che interessa Qsync Central. Se sfruttata, la...

8.8CVSS5.4AI score0.01394EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/08/25 10:35 a.m.8 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS5.6AI score0.00232EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/25 10:18 a.m.12 views

CVE-2026-75038

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

6.9CVSS0.00122EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 10:00 a.m.8 views

EUVD-2026-65393

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

6.9CVSS5.2AI score0.00122EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 10:00 a.m.3 views

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

6.9CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added 2026/08/25 1:30 a.m.9 views

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

8.6CVSS5.8AI score
SaveExploits0References4
CVE
CVE
added 2026/08/25 1:30 a.m.16 views

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...

8.6CVSS5.7AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 1:30 a.m.9 views

EUVD-2026-65210

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

8.6CVSS5.7AI score0.00143EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 2:17 p.m.9 views

CVE-2026-76845

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

6.8CVSS0.00131EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/24 1:12 p.m.18 views

CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

6.8CVSS5.6AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 1:12 p.m.35 views

CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

6.8CVSS0.00131EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/24 3:20 a.m.3 views

CVE-2026-14361

CVE-2026-14361 L'helper writeToFile di Consul Template apriva direttamente una destinazione fornita dall'operatore e seguiva i componenti di percorso linkati, consentendo all'output renderizzato di fuoriuscire dalla directory prevista e sovrascrivere un file preesistente. Introduzione Ho trovato...

4.7CVSS5.2AI score0.00133EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.11 views

PT-2026-79855

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...

7.1CVSS5.7AI score0.00325EPSS
SaveExploits2References10
Rows per page
Query Builder