CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-76461

cve-id 寄付 このプロジェクトの維持にご協力ください このプロジェクトが役立つと思われた方は、PayPal または ABA Mobile を通じて、継続的な維持管理へのご支援をご検討ください。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ ご寄付の10%は、Kantha Bopha Children's Hospital に寄付されます。 | お支払い方法を選択 ABA Mobile でスキャン · クリックで拡大 ---|--- ⚡ 簡単な使い方 GitHub...

CVE-2019-5700

CVE-2019-5700 안타깝게도 이 취약점에 대한 트렌디하고 영리한 이름이 없습니다. 이 버그는 상당히 간단하게 익스플로잇할 수 있습니다. 처음 생각했던 것보다 더 많은 장치에 영향을 미칠 수 있다는 것을 깨닫기까지 꽤 오랫동안 보류했습니다. 범위: 이 버그는 Android 부트 이미지를 부팅하는 Nvidia Tegra t114-t210 SoC에 영향을 미치지만, 한 가지 중요한 차이점이 있습니다: t114 기반 장치는 통합 부트로더가 TOSTLK - Nvidia의 시큐어 모니터도 로드하기 때문에 훨씬 더 심각한 영향을...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 Vulnerable Lab This folder builds a minimal Laravel + Livewire v3 application pinned to Livewire 3.6.3 vulnerable for reproducing CVE-2025-54068. The mounted component is intentionally written to be compatible with the public exploit chain it allows the stage-1...

cve-2022-49186-research

CVE-2022-49186: 리눅스 커널 권한 상승 연구 개요 CVE-2022-49186를 위한 보안 연구 및 개념 증명 익스플로잇입니다. 이는 Visconti 클록 드라이버의 배열 오버플로를 통해 로컬 권한 상승을 가능하게 하는 리눅스 커널 취약점입니다. 취약점 상세 유형 : 부호 없는 변환으로 인한 배열 오버플로 CVSS 점수 : 7.8 높음 영향 : 루트로의 로컬 권한 상승 영향받는 버전 : Linux 커널 5.17.0 - 5.17.1 저장소 내용 CVE-2022-49186.pdf - 전체 연구 논문...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html WebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It...

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

ddc

ddc — DEX → Java decompiler in Rust English | 简体中文 ddc decompiles Android DEX bytecode back into readable Java — at real-world app scale, queryable like a database, and javac-verified : every one of the 909,689 files it emits across seven real-world APKs parses cleanly. Highlights Fast — a 226 MB...

Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

PT-2026-107537

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

PT-2026-107390

Name of the Vulnerable Software and Affected Versions wolfSSL wolfSSH versions 1.2.0 through 1.5.0 Description In the src/internal.c file, the server incorrectly accepts server-to-client Diffie-Hellman group exchange messages, specifically SSH MSG KEX DH GEX GROUP 31 and SSH MSG KEX DH GEX REPLY...

CWE-367: Time-of-Check to Time-of-Use (TOCTOU) Race Condition

This is a brief whitepaper discussing Time-of-Check to Time-of-Use race conditions combined with business logic flaws...

PT-2026-107534

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper input validation in the Confluence to Markdown scaffolder module allows an attacker to influence file write operations during...

PT-2026-107542

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper repository path validation in a scaffolder backend module allows an authenticated user who can execute an affected template and...

CVE-2026-89182 Gitea push-to-create bypass of FORCE_PRIVATE policy

With repository FORCEPRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instan...

CVE-2026-89182 Gitea push-to-create bypass of FORCE_PRIVATE policy

With repository FORCEPRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instan...

CVE-2026-89182

A flaw in Gitea allows authenticated users with repository creation privileges to bypass instance privacy policies. When [repository] FORCE_PRIVATE = true is enabled, the post-receive hook incorrectly applies the repo.private=false push option to empty repositories created via push. This allows u...

CVE-2026-89182 Gitea push-to-create bypass of FORCE_PRIVATE policy

With repository FORCEPRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instan...