Lucene search
+L

587 matches found

Kitploit
Kitploit
added 2026/09/16 12:15 p.m.9 views

subpath-exploit

Ejemplo de Escape de Kubernetes mediante CVE-2017-1002101 Descripción Después de conocer el problema y seguir esta guía, quise explorar un poco más. Este repositorio contiene un par de despliegues de pods y scripts auxiliares de shell que demuestran el mecanismo de ataque de la manera más simple...

9.6CVSS7.8AI score0.13267EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 3:43 a.m.14 views

CVE-2026-14361

CVE-2026-14361 El helper writeToFile de Consul Template abría directamente un destino proporcionado por el operador y seguía los componentes de ruta con enlaces, lo que permitía que la salida renderizada escapara del directorio previsto y sobrescribiera un archivo preexistente. Introducción...

4.7CVSS5.9AI score0.00133EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/15 10:08 a.m.4 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS5.7AI score0.00232EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/15 10:06 a.m.5 views

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

7.8CVSS5.7AI score0.00232EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.8 views

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

8.5CVSS6.7AI score0.00229EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.8 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

8.5CVSS6.7AI score0.00229EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/14 4:34 p.m.10 views

OESA-2026-3832 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

7.8CVSS6.2AI score0.00163EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/09/14 7:59 a.m.7 views

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

8.5CVSS6.2AI score0.00163EPSS
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/14 1:59 a.m.7 views

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: escalada de privilegios local en authorizedkey de ansible.posix Escalada de privilegios local en el módulo Ansible ansible.posix.authorizedkey mediante chown que sigue enlaces simbólicos y creación de archivos que sigue enlaces simbólicos en el directorio /.ssh del usuario y el...

7.3CVSS7.2AI score0.00161EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/14 12:00 a.m.5 views

ALSA-2026:67463 Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

9.2CVSS7AI score0.00573EPSS
SaveExploits1References41
OSV
OSV
added 2026/09/14 12:00 a.m.4 views

ALSA-2026:67462 Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

9.2CVSS7AI score0.00573EPSS
SaveExploits1References39
Kitploit
Kitploit
added 2026/09/13 8:36 p.m.14 views

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Escalada de privilegios local por symlink en Meta below Descripción general Campo| Detalles ---|--- CVE| CVE-2025-27591 Software| Meta below monitor de recursos del sistema Versiones afectadas| 0.9.0 Vulnerabilidad| Seguimiento de symlink → sobrescritura arbitraria de archivos co...

6.8CVSS7.6AI score0.00364EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/13 2:25 p.m.11 views

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "Se ha informado de una vulnerabilidad de seguimiento de enlaces que afecta a Qsync Central. Si se explota, la...

8.8CVSS6.1AI score0.01434EPSS
SaveExploits2
NVD
NVD
added 2026/09/11 11:16 a.m.8 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS0.00162EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 11:16 a.m.7 views

DEBIAN-CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/09/11 11:16 a.m.5 views

CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 11:16 a.m.2 views

UBUNTU-CVE-2026-77159

A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 11:15 a.m.8 views

EUVD-2026-76070

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

9.3CVSS5.6AI score0.00315EPSS
SaveExploits0References2
Rows per page
Query Builder