Lucene search
+L

485 matches found

Kitploit
Kitploit
added 2026/09/05 7:34 a.m.5 views

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: ansible.posix authorizedkey のローカル権限昇格 ansible.posix.authorizedkey Ansible モジュールにおける、ユーザーの /.ssh ディレクトリと authorizedkeys ファイルに対するシンボリックリンク追従 chown(およびシンボリックリンク追従によるファイル作成)を介したローカル権限昇格。 これは、私が報告し、Red Hat Product Security(CNA)によって CVE-2026-11837 が割り当てられた脆弱性の writeup...

7.3CVSS6.8AI score0.00161EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/05 4:09 a.m.5 views

CVE-2026-14361

CVE-2026-14361 Consul Template の writeToFile ヘルパーは、オペレーターが指定した宛先を直接開き、リンクされたパスコンポーネントをたどるため、レンダリングされた出力が意図したディレクトリの外に逃れ、既存のファイルを上書きする可能性がありました。 はじめに この問題は、HashiCorp Consul Template をレビューしているときに、直接的なファイルシステムのセキュリティ問題を念頭に置いて見つけました。 writeToFile...

4.7CVSS5.2AI score0.00133EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 2:17 a.m.8 views

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below シンボリックリンク ローカル権限昇格 概要 項目| 詳細 ---|--- CVE| CVE-2025-27591 ソフトウェア| Meta below(システムリソースモニター) 影響を受けるバージョン| 0.9.0 脆弱性| シンボリックリンクの追跡 → root として任意のファイルを上書き 認証| below への sudo アクセス権を持つローカルユーザー 影響| root へのローカル権限昇格 背景| HackTheBox CTF 中に発見 説明 below システムリソース監視ツール(Meta Platforms, In...

6.8CVSS6.9AI score0.00364EPSS
SaveExploits23References1
RedhatCVE
RedhatCVE
added 2026/09/04 4:49 p.m.4 views

CVE-2026-53802

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.3AI score0.00238EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/04 2:47 p.m.3 views

subpath-exploit

샘플 Kubernetes 탈출 - CVE-2017-1002101 이용 설명 이 문제에 대해 듣고 이 가이드를 따라가면서, 좀 더 탐구해보고 싶었습니다. 이 리포지토리는 몇 가지 파드 배포와 헬퍼 셸 스크립트를 포함하여, 쿠버네티스 관리자와 운영자가 심각성과 잠재적 위험을 완전히 이해할 수 있도록 공격 메커니즘을 가장 간단한 방식으로 보여줍니다. 인증된 사용자이거나 파드의 스펙/템플릿을 생성 시 제어할 수 있어야 하므로, 이 탈출은 다른 공격예: 이것과 결합하지 않으면 익명으로 이루어지지 않을 가능성이 높습니다. 빠른 설명...

9.6CVSS7.9AI score0.13267EPSS
SaveExploits2
NVD
NVD
added 2026/09/03 1:06 p.m.7 views

CVE-2026-85092

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS0.00152EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 1:30 a.m.6 views

Fortinet_FortiClient_Exploit_CVE-2026-24018

Exploit de Fortinet FortiClient CVE-2026-24018 Exploit totalmente funcional para CVE-2026-24018: una vulnerabilidad de seguimiento de enlaces simbólicos Symlink de UNIX en Fortinet FortiClientLinux 7.4.0 hasta 7.4.4, FortiClientLinux 7.2.2 hasta 7.2.12 permite a un usuario local y sin privilegios...

7.8CVSS7.5AI score0.00228EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/03 1:04 a.m.6 views

CVE-2026-85092 LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

5.2CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/03 1:04 a.m.28 views

CVE-2026-85092 LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

6.6CVSS0.00152EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 1:04 a.m.13 views

CVE-2026-85092

LiME (Linux Memory Engine) through version 1.12.0 contains an arbitrary file overwrite vulnerability caused by a missing O_NOFOLLOW flag and insufficient validation of the operator-supplied disk acquisition output path. An unprivileged local attacker who controls the output directory can plant a ...

6.6CVSS5.5AI score0.00152EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.4 views

Dell PowerProtect Cyber Recovery < 20.3.0.0 Multiple Vulnerabilities (DSA-2026-370)

The version of Dell PowerProtect Cyber Recovery installed on the remote host is prior to 20.3.0.0. It is, therefore, affected by multiple vulnerabilities: - Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command 'SQ...

7.8CVSS5.9AI score0.00224EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/09/02 2:27 p.m.10 views

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

5.9AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/09/02 2:27 p.m.9 views

GHSA-P498-V437-472G humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

5.7CVSS5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 10:06 a.m.8 views

CVE-2026-D0cker

CVE-2026-Pending: runC maskPaths 脆弱性によるコンテナエスケープ 深刻度: クリティカル CVSS 9.8 コンポーネント: opencontainers/runc libcontainer 脆弱性タイプ: CWE-59: ファイルアクセス前のリンク解決の不備 'Link Following' 🚨 エグゼクティブサマリー runc の maskPaths 関数に重大な脆弱性が存在します。コンテナ内の機密パス 例: /proc/kcore をマスクする際、runc は os.OpenFilepath, OPATH, 0 を ONOFOLLOW...

5.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.7 views

MiracleLinux 8 : abrt-2.10.9-26.el8_10.ML.1 (AXSA:2026-1725:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1725:01 advisory. abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories CVE-2026-54228 abrt: ChownProblemDir succeeds...

7.8CVSS5.8AI score0.00184EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/31 4:11 a.m.11 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS7.2AI score0.00232EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-82252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata...

8.7CVSS6AI score0.00387EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-82248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the worktree on Windows. gixworktreestate::checkout follows an existing terminal...

6CVSS5.9AI score0.00229EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/30 2:25 p.m.7 views

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "링크 추적link following 취약점이 Qsync Central에 영향을 미치는 것으로 보고되었습니다. 악용될 경우, 이 취약점으로 인해 사용자 접근 권한을 획득한 원격 공격자가 파일 시스템을 탐색하여...

8.8CVSS5.4AI score0.01394EPSS
SaveExploits2
NVD
NVD
added 2026/08/28 8:18 p.m.12 views

CVE-2026-55569

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

6.6CVSS0.00142EPSS
SaveExploits0References3
Rows per page
Query Builder