Lucene search
+L

480 matches found

Kitploit
Kitploit
added 2026/09/03 8:20 p.m.5 views

CVE-2026-14361

CVE-2026-14361 Le helper writeToFile de Consul Template ouvrait directement une destination fournie par l'opérateur et suivait les composants de chemin liés, permettant à la sortie rendue de s'échapper du répertoire prévu et d'écraser un fichier préexistant. Introduction J'ai trouvé ce problème e...

4.7CVSS5.8AI score0.00133EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 1:16 p.m.3 views

subpath-exploit

مثال على الهروب من Kubernetes عبر CVE-2017-1002101 الوصف بعد سماعي عن الثغرة واتباعي هذا الدليل، أردت استكشاف الأمور أكثر قليلاً. يحتوي هذا المستودع على عدد من نشرات الـ pods والنصوص المساعدة التي توضح آلية الهجوم بأبسط طريقة ممكنة حتى يتمكن مسؤولو ومشغّلو Kubernetes من الفهم الكامل لخطورة الثغرة...

9.6CVSS7.1AI score0.13267EPSS
SaveExploits2
NVD
NVD
added 2026/09/03 1:06 p.m.4 views

CVE-2026-85092

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS0.00152EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 1:30 a.m.6 views

Fortinet_FortiClient_Exploit_CVE-2026-24018

Exploit Fortinet FortiClient CVE-2026-24018 Exploit entièrement fonctionnel pour CVE-2026-24018 : une vulnérabilité de suivi de lien symbolique Symlink UNIX dans Fortinet FortiClientLinux 7.4.0 à 7.4.4, FortiClientLinux 7.2.2 à 7.2.12 permet à un utilisateur local et non privilégié d'élever ses...

7.8CVSS7.1AI score0.00228EPSS
SaveExploits1References1
CVE
CVE
added 2026/09/03 1:04 a.m.12 views

CVE-2026-85092

LiME (Linux Memory Engine) through version 1.12.0 contains an arbitrary file overwrite vulnerability caused by a missing O_NOFOLLOW flag and insufficient validation of the operator-supplied disk acquisition output path. An unprivileged local attacker who controls the output directory can plant a ...

6.6CVSS6AI score0.00152EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/03 1:04 a.m.15 views

CVE-2026-85092 LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS0.00152EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/09/02 2:27 p.m.10 views

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

5.9AI score
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2026/09/01 10:06 a.m.8 views

CVE-2026-D0cker

CVE-2026-Pending: هروب الحاوية عبر ثغرة maskPaths في runC درجة الخطورة: حرجة CVSS 9.8 المكوّن: opencontainers/runc libcontainer نوع الثغرة: CWE-59: التحليل غير الصحيح للروابط قبل الوصول إلى الملف 'اتباع الروابط' 🚨 الملخص التنفيذي توجد ثغرة حرجة في دالة maskPaths الخاصة بـ runc. عند إخفاء المسارات...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.6 views

MiracleLinux 8 : abrt-2.10.9-26.el8_10.ML.1 (AXSA:2026-1725:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1725:01 advisory. abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories CVE-2026-54228 abrt: ChownProblemDir succeeds...

7.8CVSS6AI score0.00184EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/31 4:11 a.m.11 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS7.2AI score0.00232EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-82252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata...

8.7CVSS6AI score0.00387EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-82248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the worktree on Windows. gixworktreestate::checkout follows an existing terminal...

6CVSS5.9AI score0.00229EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/30 2:25 p.m.7 views

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow...

8.8CVSS5.8AI score0.01394EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/29 7:33 a.m.5 views

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: escalatione dei privilegi locali in ansible.posix.authorizedkey Escalatione locale dei privilegi nel modulo Ansible ansible.posix.authorizedkey tramite chown che segue i collegamenti simbolici e creazione di file che segue i collegamenti sulla directory /.ssh e sul file...

7.3CVSS6.8AI score0.00259EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/29 2:17 a.m.8 views

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below: escalation locale dei privilegi tramite symlink Panoramica Campo| Dettagli ---|--- CVE| CVE-2025-27591 Software| Meta below monitor delle risorse di sistema Versioni interessate| 0.9.0 Vulnerabilità| Follow di symlink → sovrascrittura arbitraria di file come root...

6.8CVSS6.8AI score0.00364EPSS
SaveExploits23References1
NVD
NVD
added 2026/08/28 8:18 p.m.11 views

CVE-2026-55569

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

6.6CVSS0.00142EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/28 4:26 p.m.32 views

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

6.6CVSS0.00142EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/28 4:26 p.m.25 views

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

6.6CVSS5.9AI score0.00142EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/28 4:26 p.m.10 views

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

6.6CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/08/28 4:11 p.m.29 views

CVE-2026-55108

KubeVela 's Terraform remote configuration loader in pkg/controller/utils/capability.go (function GetTerraformConfigurationFromRemote) is vulnerable to denial of service. When a user with low privileges (ability to create or update ComponentDefinition objects) registers a Terraform remote schemat...

8.5CVSS5.9AI score0.00567EPSS
SaveExploits0References9
Rows per page
Query Builder