Astra Linux – Vulnerability in php-pear

In ArchiveTar version 1.4.11, the Tar.php script allows write operations involving directory traversal, due to insufficient checking of symbolic links. This issue is related to CVE-2020-28948...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: udf: Fixed NULL pointer dereferencing in the udfsymlink function. In the udfsymlink function, epos.bh is assigned the value returned by udftgetblk. The udftgetblk function is defined in udf/misc.c and returns the value of the...

Astra Linux – Vulnerability in node-tar

The npm package “tar” also known as node-tar in versions prior to 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has a vulnerability related to arbitrary file creation/overwriting, due to insufficient symlink protection. node-tar aims to ensure that any file whose location would be modified by a symbolic link i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: smb: Client: Fixed an error in parsing OOB read responses for symlinks. When a CREATE command returns STATUSSTOPPEDONSYMLINK, the smb2checkmessage function returns success without performing any length validation. As a result,...

Astra Linux – Vulnerability in multipath-tools

Multipath-tools versions 0.7.7 through 0.9.x, prior to 0.9.2, allowed local users to obtain root access. This vulnerability was exploited in conjunction with CVE-2022-41974. Local users who had access to /dev/shm could modify symlinks within multipathd due to incorrect symlink handling. This coul...

CVE-2025-27591

CVE-2025-27591 Exploit de escalada de privilegios PoC para Below v0.9.0 Descargo de responsabilidad Este exploit está destinado únicamente con fines educativos. Está diseñado para ayudar a los usuarios a comprender las vulnerabilidades de seguridad y mejorar sus conocimientos sobre ciberseguridad...

CVE-2026-31802

🛡️ CVE-2026-31802 - Visor Simple de Prueba de Concepto 📋 Acerca de CVE-2026-31802 Este repositorio proporciona una prueba de concepto PoC y un informe detallado para CVE-2026-31802. El problema es una vulnerabilidad de seguridad en el paquete npm tar. Permite a los atacantes engañar al software...

Important: Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

An update for libvirt is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW Un POC para CVE-2024-32002 que demuestra escritura arbitraria en el directorio .git. Vea cve-2024-32002-submodule-aw para el repositorio de submódulo relacionado. Lo que contiene este repositorio Un enlace simbólico con un nombre arbitrario que enlaza al directorio .git. Un...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Escritura Arbitraria de Archivos mediante Symlink Traversal Resumen Gogs = 0.13.3 es vulnerable a la escritura arbitraria de archivos a través de la API PutContents /api/v1/repos/:owner/:repo/contents/:path. La API valida rutas de archivo para secuencias de directory...

CVE-2025-27519

Exploit de escalada de privilegios Below CVE-2025-27519 Este repositorio contiene un script Bash de prueba de concepto PoC para explotar la vulnerabilidad de escalada de privilegios Below CVE-2025-27519 en sistemas Linux. El exploit permite a un usuario local escalar privilegios a root abusando d...

Below-Logger-Symlink-Attack_CVE-2025-27591

CVE-2025-27591 Exploit - Ataque de Enlace Simbólico del Logger Below Un exploit de escalada de privilegios basado en Bash dirigido a la herramienta de monitoreo de rendimiento del sistema below. Este exploit renovado aprovecha una vulnerabilidad de enlace simbólico en el mecanismo de registro par...

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: escalada de privilegios local en authorizedkey de ansible.posix Escalada de privilegios local en el módulo Ansible ansible.posix.authorizedkey mediante chown que sigue enlaces simbólicos y creación de archivos que sigue enlaces simbólicos en el directorio /.ssh del usuario y el...

ALSA-2026:75583 Important: libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: libvirt: swtpm privilege escalation via symlink following...

PT-2026-106189

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory aka -C into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected...

TencentOS Server 2: abrt (TSSA-2026:1088)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1088 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2026-105712: UNIX Symbolic Link (Symlink) Following

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory aka -C into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected...

CVE-2025-8110

CVE-2025-8110 — Traversal de enlaces simbólicos en Gogs → RCE Resumen CVE-2025-8110 es una vulnerabilidad crítica en Gogs servicio Git autoalojado versiones = 0.13.3. La API PutContents valida las rutas de archivo contra el recorrido de directorios ../ pero no resuelve los enlaces simbólicos ante...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs es un servicio Git ligero y autoalojado similar a una versión privada de GitHub, diseñado para ejecutarse fácilmente en servidores de bajos recursos. La vulnerabilidad CVE-2025-8110 es un fallo de seguridad crítico que permite a un atacante eludir las restricciones de...