PoC_CVE-2023-24055

PoCCVE-2023-24055 How to run ? Edit the $User var in the script and replace value with your Username. Open a PowerShell as administrator and run the script : ./PoCCVE-2023-24055.ps1 After the script execution open KeePass. Result is stored under "C:\Users\yourusername\AppData\Local\Temp\output.xm...

CVE-2026-17525

The ABB My Control System versions 26.4 and 26.5 are susceptible to an incomplete cleanup vulnerability (CWE-459). The root cause is an incorrect cleanup of temporary files following an XML conversion , which can lead to disk space exhaustion . This issue impacts the availability of the system. R...

printix-CVE-2022-25090

CVE-2022-25090 Instead of printing your homework as a user, print your system security policies as SYSTEM for fun. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap Contributing Licen...

CVE-2026-82715

An Insecure Temporary File vulnerability (CWE-377) exists in the Hitachi Disk Array Driver for AIX (versions 01-00 before 01-23-/A) and the Hitachi Disk Array Driver for Virtual I/O Server (versions 01-04 before 01-23-/A). This flaw could lead to High impacts on integrity and availability accordi...

EUVD-2026-100774

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

PT-2026-113597

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

CVE-2026-110234

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2014-5284

CVE-2014-5284 Bash implementation of CVE-2014-5284 Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Python is nice but doesn't work all the time Exploit Author: mbadanoiu Python Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...

CVE-2026-109276 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and...

CVE-2026-109276 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and...

CVE-2026-109276

The ImageMagick library versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a temporary file leak within the JNG decoder . The root cause is an incomplete cleanup flaw that occurs when the software processes crafted JNG input , failing to remove temporary files. This allows an a...

Safenet_SAC_CVE-2021-42056

Safenet Authentication Client Privilege Escalation CVE-2021-42056 Based on Thales' website 1, SafeNet Authentication Client – is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, USB and...

CVE-2026-107805 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

CVE-2026-105826

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting a specially crafted MATLAB MAT image containing highly compressed data. The MAT decoder fails to enforce configured temporary file size limits during decompression, allowing oversized temporary file...

Insecure Temporary File Handling

lz4-java is vulnerable to Insecure Temporary File Handling. The vulnerability is due to the way net.jpountz.util.Native.load extracts the native library: it creates a lock file with File.createTempFile and then derives the library path by stripping the .lck suffix, opening the resulting file with...

Insecure Temporary File

Overview org.lz4:lz4-java is a Java port of the LZ4 compression algorithm and the xxHash hashing algorithm. Affected versions of this package are vulnerable to Insecure Temporary File in the process that extracts and loads the native library via net.jpountz.util.Native.load. An attacker can execu...

Insecure Temporary File

Overview Affected versions of this package are vulnerable to Insecure Temporary File in the process that extracts and loads the native library via net.jpountz.util.Native.load. An attacker can execute arbitrary code by pre-creating a malicious file in a shared temporary directory, causing the...

CVE-2026-91140: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...