Lucene search
+L

397 matches found

Kitploit
Kitploit
added 2026/08/25 5:24 p.m.2 views

subpath-exploit

Пример ухода из Kubernetes через CVE-2017-1002101 Описание Узнав о проблеме и следуя этому руководству, я захотел изучить её подробнее. Этот репозиторий содержит несколько развёртываний подов и вспомогательные shell-скрипты, которые демонстрируют механизм атаки самым простым способом, чтобы...

9.6CVSS7.8AI score0.11295EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/08/25 10:35 a.m.6 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS5.6AI score0.00232EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/25 10:18 a.m.11 views

CVE-2026-75038

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

6.9CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 10:06 a.m.2 views

CVE-2026-D0cker

CVE-2026-Pending: Побег из контейнера через уязвимость runC maskPaths Серьёзность: Критическая CVSS 9.8 Компонент: opencontainers/runc libcontainer Тип уязвимости: CWE-59: Неправильное разрешение ссылок перед доступом к файлу 'Link Following' 🚨 Краткое описание Критическая уязвимость существует в...

5.8AI score
SaveExploits0
EUVD
EUVD
added 2026/08/25 10:00 a.m.5 views

EUVD-2026-65393

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

6.9CVSS5.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 4:15 a.m.2 views

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "링크 추적link following 취약점이 Qsync Central에 영향을 미치는 것으로 보고되었습니다. 악용될 경우, 이 취약점으로 인해 사용자 접근 권한을 획득한 원격 공격자가 파일 시스템을 탐색하여...

8.8CVSS5.4AI score0.01394EPSS
SaveExploits2
CVE
CVE
added 2026/08/25 1:30 a.m.15 views

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...

8.6CVSS5.7AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 1:30 a.m.7 views

EUVD-2026-65210

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

8.6CVSS5.7AI score0.00143EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 2:17 p.m.8 views

CVE-2026-76845

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

6.8CVSS0.00131EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/24 1:12 p.m.35 views

CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

6.8CVSS0.00131EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/24 3:20 a.m.2 views

CVE-2026-14361

CVE-2026-14361 Помощник writeToFile в Consul Template открывал указанное оператором место назначения напрямую и следовал по связанным компонентам пути, позволяя отрисованному выводу выйти за пределы задуманного каталога и перезаписать существующий файл. Intro Я нашёл эту проблему при анализе...

4.7CVSS0.00133EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.9 views

PT-2026-79855

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...

7.1CVSS5.7AI score0.00325EPSS
SaveExploits2References10
Kitploit
Kitploit
added 2026/08/22 7:33 a.m.1 views

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: ansible.posix authorizedkey 로컬 권한 상승 사용자의 /.ssh 디렉터리 및 authorizedkeys 파일에 대한 심볼릭 링크를 따라가는 chown및 심볼릭 링크를 따라가는 파일 생성을 통한 ansible.posix.authorizedkey Ansible 모듈의 로컬 권한 상승입니다. 이는 제가 보고하고 Red Hat Product SecurityCNA에서 CVE-2026-11837 을 할당한 취약점에 대한 분석입니다. 기술 기록으로서 여기에 게시되며, 새로운 발견을 주장하는...

7.3CVSS0.00259EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/22 2:17 a.m.1 views

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below — повышение локальных привилегий через симлинк Обзор Поле| Подробности ---|--- CVE| CVE-2025-27591 Программное обеспечение| Meta below монитор системных ресурсов Затронутые версии| 0.9.0 Уязвимость| Следование за симлинком → произвольная перезапись файла от root...

6.8CVSS0.00364EPSS
SaveExploits23References1
NVD
NVD
added 2026/08/21 9:17 p.m.8 views

CVE-2026-55168

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...

6.5CVSS0.00528EPSS
SaveExploits1References4
NVD
NVD
added 2026/08/21 9:16 p.m.5 views

CVE-2026-44517

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...

6.3CVSS0.0018EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/21 8:31 p.m.10 views

EUVD-2026-64143

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...

6.5CVSS5.7AI score0.00528EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2026/08/21 8:29 p.m.19 views

CVE-2026-44517

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...

6.3CVSS5.5AI score0.0018EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/21 8:29 p.m.27 views

CVE-2026-44517 Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...

6.3CVSS0.0018EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/21 4:17 p.m.9 views

CVE-2026-49114

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...

7.1CVSS0.00107EPSS
SaveExploits0References3
Rows per page
Query Builder