Lucene search
+L

605 matches found

Kitploit
Kitploit
added 2026/09/18 6:12 p.m.15 views

CVE-2026-14361

CVE-2026-14361 Le helper writeToFile de Consul Template ouvrait directement une destination fournie par l'opérateur et suivait les composants de chemin liés, permettant à la sortie rendue de s'échapper du répertoire prévu et d'écraser un fichier préexistant. Introduction J'ai trouvé ce problème e...

4.7CVSS5.9AI score0.00133EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 12:56 p.m.9 views

subpath-exploit

Пример ухода из Kubernetes через CVE-2017-1002101 Описание Узнав о проблеме и следуя этому руководству, я захотел изучить её подробнее. Этот репозиторий содержит несколько развёртываний подов и вспомогательные shell-скрипты, которые демонстрируют механизм атаки самым простым способом, чтобы...

9.6CVSS7.8AI score0.13267EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/09/17 12:26 p.m.6 views

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

7.8CVSS0.00132EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/17 7:14 a.m.7 views

Important: Red Hat Security Advisory: virt:rhel security update

An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.8CVSS0.00864EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/17 7:14 a.m.7 views

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

7.8CVSS0.00132EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/17 1:02 a.m.10 views

Fortinet_FortiClient_Exploit_CVE-2026-24018

Exploit Fortinet FortiClient CVE-2026-24018 Exploit entièrement fonctionnel pour CVE-2026-24018 : une vulnérabilité de suivi de lien symbolique Symlink UNIX dans Fortinet FortiClientLinux 7.4.0 à 7.4.4, FortiClientLinux 7.2.2 à 7.2.12 permet à un utilisateur local et non privilégié d'élever ses...

7.8CVSS7.3AI score0.00228EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/17 12:52 a.m.6 views

gortex-PoC

Suivi de liens symboliques dans le parcours de fichiers de l'indexeur → Divulgation de contenu hors dépôt via searchtext Statut CVE : demandé, en attente d'attribution. Cette découverte est publiée sous GHSA-6vhf-4wcm-2r83. À l'attribution de la CVE, ce dépôt sera renommé CVE-YYYY-NNNNN-gortex-Po...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 6:17 p.m.13 views

CVE-2026-D0cker

CVE-2026-Pending: Container Escape via runC maskPaths Vulnérabilité Gravité : Critique CVSS 9.8 Composant : opencontainers/runc libcontainer Type de vulnérabilité : CWE-59 : Résolution incorrecte des liens avant l'accès aux fichiers 'Link Following' 🚨 Résumé Exécutif Une vulnérabilité critique...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.7 views

MiracleLinux 8 : mrtg-2.17.7-1.el8_10.1 (AXSA:2026-1849:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1849:03 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...

7.1CVSS0.00129EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/15 10:08 a.m.7 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS5.7AI score0.00232EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/15 10:06 a.m.5 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS5.7AI score0.00232EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/15 8:49 a.m.11 views

BIT-RCLONE-2026-88016 rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can plant a symlink in the destination and later directory metadata is applied through that path...

7.1CVSS5.8AI score0.00187EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.8 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.9 views

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

8.5CVSS6.7AI score0.00229EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.8 views

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

8.5CVSS6.7AI score0.00229EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/14 4:34 p.m.14 views

OESA-2026-3832 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

7.8CVSS6.2AI score0.00169EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/09/14 7:59 a.m.9 views

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

8.5CVSS6.2AI score0.00169EPSS
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/14 1:59 a.m.7 views

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837 : escalade de privilèges locale avec authorizedkey de ansible.posix Escalade de privilèges locale dans le module Ansible ansible.posix.authorizedkey via chown suivant les liens symboliques et création de fichier suivant les liens symboliques sur le répertoire /.ssh d'un utilisateur...

7.3CVSS7.2AI score0.00161EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/14 12:00 a.m.9 views

ALSA-2026:67463 Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

9.2CVSS7AI score0.00573EPSS
SaveExploits1References41
Rows per page
Query Builder