422 matches found
CVE-2025-27591-Meta-below-LPE
CVE-2025-27591 — Meta below: escalation locale dei privilegi tramite symlink Panoramica Campo| Dettagli ---|--- CVE| CVE-2025-27591 Software| Meta below monitor delle risorse di sistema Versioni interessate| 0.9.0 Vulnerabilità| Follow di symlink → sovrascrittura arbitraria di file come root...
CVE-2026-81690
openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...
CVE-2026-56651
Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...
EUVD-2026-67046
openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...
CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project
Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...
CVE-2026-56651
Dool (a shell utility for managing shell history) in versions up to 1.3.8 is vulnerable to symlink following when the --devel flag is used. The application opens its log file without the O_NOFOLLOW flag, allowing a local attacker to place a symlink at the expected log path pointing to a sensitive...
EUVD-2026-67129
Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...
CVE-2026-76845
A flaw was found in adm-zip, a Node.js library used for handling zip archives. This vulnerability allows a local attacker to overwrite arbitrary files on the system. When extracting an archive, adm-zip follows symbolic links, which are special files that point to other files or directories. An...
CVE-2026-49114
A flaw was found in ONNX. The saveexternaldata function is vulnerable to symlink following and path traversal. A local attacker with write access to a directory where a victim serializes external data can exploit this by pre-planting a symlink. This allows the attacker to cause the victim's write...
Fortinet_FortiClient_Exploit_CVE-2026-24018
Fortinet FortiClient Exploit CVE-2026-24018 Voll funktionsfähiger Exploit für CVE-2026-24018: Eine Schwachstelle in Fortinet FortiClientLinux 7.4.0 bis 7.4.4 und FortiClientLinux 7.2.2 bis 7.2.12, die einem UNIX-Symbolischen Link Symlink folgt, ermöglicht es einem lokalen und nicht privilegierten...
CVE-2026-D0cker
CVE-2026-Pending: Container-Escape über die runC-maskPaths-Sicherheitslücke Schweregrad: Kritisch CVSS 9.8 Komponente: opencontainers/runc libcontainer Sicherheitslückentyp: CWE-59: Unzulässige Linkauflösung vor Dateizugriff 'Link Following' 🚨 Zusammenfassung Eine kritische Sicherheitslücke beste...
subpath-exploit
Esempio di fuga da Kubernetes tramite CVE-2017-1002101 Descrizione Dopo aver letto del problema e aver seguito questa guida, ho voluto approfondire un po' la cosa. Questo repository contiene un paio di deployment di pod e script shell di supporto che dimostrano il meccanismo di attacco nel modo p...
CVE-2026-79939
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...
CVE-2026-79939
Dell PowerProtect Cyber Recovery , versions prior to 20.3 , contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low-privileged attacker with local access could potentially exploit this flaw, leading to Script injection . The vulnerability is rated CVSS 5.8 (MEDIUM) with a vector of ...
CVE-2026-79939
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...
EUVD-2026-66706
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...
CVE-2024-50404
CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "È stata segnalata una vulnerabilità di follow-up dei collegamenti che interessa Qsync Central. Se sfruttata, la...
golang: Go os.Root: Symlink following vulnerability allows directory traversal
A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...