CVE-2026-112016

Netcore NR256CN through 1.5.140116 is vulnerable to an unauthenticated file write vulnerability within the Boa-derived /bin/boa web server . A remote attacker can exploit this by sending a POST request to a non-existent .cgi pathname. This action allows the attacker to write controlled content in...

ChromeSHELFLoader

Chrome SHELF Loader An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2...

Langflow < 1.9.0 - Remote Code Execution

Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...

CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp

CVE-2026-21002 – Serverless Cold Start Credential Leakage via Reused /tmp Program Code Python AWS Lambda sim lambdafuncsim.py - Simulated serverless function import os, tempfile, time SECRETFILE = '/tmp/credentials' reused across warm starts def handlerevent: On first invocation, write a secret i...

CVE-2026-41900-POC

OpenLearnX-RCE OpenLearnX Unauthenticated RCE via Container Volume Mount Diff-based discovery → Silent patch → Sandbox escape → Full /tmp disclosure Property| Value ---|--- Name| OpenLearnX-RCE CVE| CVE-2026-41900 GHSA| GHSA-8h25-q488-4hxw Type| Unauthenticated Info Disclosure / RCE Affected|...

google-osconfig-privesc

Summary The googleosconfigagent process is a component GoogleCloudPlatform https://github.com/GoogleCloudPlatform/osconfig tooling, running on each VM by default. The agent is running as root and responsible for some user-controllable services, including OS config...

cve-2022-21658

CVE-2022-21658 poc Make sure the use the Rust 1.58.0 version. First run: while :; do mkdir /tmp/legit; rm -r /tmp/legit; ln -s /tmp/sensitive /tmp/legit; done Then: cargo run...

CVE-2026-49484

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where...

CVE-2026-49484

The Code for IBM i Visual Studio Code extension (prior to version 3.0.1 ) contains a vulnerability in src/ui/views/objectBrowser.ts. The component stores Object Browser downloads and edit-save flow content in the shared /tmp directory without reliable cleanup, which may allow other local accounts...

CVE-2026-49484 Code for IBM i: Temporary files are visible to all users

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where...

CVE-2026-49484 Code for IBM i: Temporary files are visible to all users

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where...

CVE-2026-48907

CVE-2026-48907 Educational PoC ⚠️ This repository is for educational and defensive security purposes only. Test only on systems you own or are explicitly authorized to assess. Do not use this project against third-party systems. This PoC demonstrates CVE-2026-48907, an unauthenticated RCE...

PT-2026-110985

Name of the Vulnerable Software and Affected Versions Code for IBM i versions prior to 3.0.1 Description The extension stores Object Browser downloads and edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where the /tmp directory is accessible to other local...

CVE-2026-108751: Improper Link Resolution Before File Access

MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging path. Attackers can commit a symlink such as .claude/settings.json.moai-tmp so...

Exploit for CVE-2026-61424

CVE-2026-61424 Unauthenticated arbitrary file upload in the D...

MAL-2026-17604 Malicious code in keccka (RubyGems)

RubyGems runs this gem's native extension script ext/keccka/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes and...

MAL-2026-17617 Malicious code in web3-sign-helper (RubyGems)

RubyGems runs this gem's native extension script ext/web3-sign-helper/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Rocky Linux 8 [CIQ] Security Update: socat / socat-debuginfo / socat-debugsource (crlsa-2025_11042)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202511042 advisory. socat: arbitrary file overwrite via predictable /tmp directory CVE-2024-54661 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: socat / socat-debuginfo / socat-debugsource (crlsa-2025_10353)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510353 advisory. socat: arbitrary file overwrite via predictable /tmp directory CVE-2024-54661 Tenable has extracted the preceding description block directly from the CIQ security...

Security Bulletin: Vulnerabilities in Netty,Apache Log4j Core,Spring Boot,Spring Framework,PostCSS,tmp,Spring Data,Apache Commons Lang,React Router,Bootstrap,d3-color might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Apache Log4j Core, Spring Boot, Spring Framework, PostCSS, tmp, Spring Data, Apache Commons Lang, React Router, Bootstrap,d3-color. Vulnerabilities include The attacker can present a server certificate...