EDRaser

EDRaser 使用指南 EDRaser 是一款功能强大的工具，用于远程删除目标机器上的访问日志、Windows 事件日志、数据库及其他文件。 它提供两种操作模式：自动模式和手动模式。 自动模式 在自动模式下，EDRaser 扫描指定 IP 地址段的 C 类网段，寻找易受攻击的系统并自动发起攻击。 自动模式下的攻击包括： 远程删除 Web 服务器日志。 删除 SysLog（Linux 系统）。 本地删除 Windows 应用程序事件日志。 远程删除 Windows 事件日志。 删除 VMX 和 VMDK 文件 要使用自动模式，请按照以下步骤操作： python edraser.py...

libvmdk

libvmdk es una biblioteca para acceder al formato VMware Virtual Disk VMDK. Información del proyecto: Estado: alpha Licencia: LGPL-3.0-or-later Formatos de archivo extent admitidos para lectura: RAW flat COWD versión 1 sparse VMDK versiones 1, 2 y 3 sparse Características admitidas del formato...

CVE-2020-14293

CVE-2020-14293 Esta vulnerabilidad fue descubierta y divulgada por mí. Este repositorio contendrá el aviso, el software vulnerable y los exploits. Este repositorio es solo con fines educativos. Enlaces Aviso SYSS-2020-025 Informe detallado Entrada del blog de SySS Exploit en Exploit-DB Aviso del...

google-poc

Para reproducir el CVE-2025-13425 solo sigue los pasos a continuación: Paso 1: Clona el código fuente fresco de osv-scalibr: $ git clone https://github.com/google/osv-scalibr Paso 2: Elimina el código mencionado en el commit de la corrección...

CVE-2026-102252

A flaw was found in OSV-SCALIBR. This vulnerability allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning a crafted Virtual Machine Disk VMDK image, insufficient validation of archive path entries in the embedded filesystem extractor allows...

CVE-2026-102252

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

CVE-2026-102252 Path Traversal in VMDK Extractor in OSV-SCALIBR

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

EUVD-2026-89370

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

CVE-2026-102252

A path traversal vulnerability (CWE-22) exists in the embedded VMDK filesystem extractor within Google OSV-SCALIBR versions 0.3.6 through 0.5.0 . The root cause is insufficient validation of archive path entries , which enables an attacker controlling the scan target to extract files outside of t...

CVE-2026-102252 Path Traversal in VMDK Extractor in OSV-SCALIBR

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

CVE-2026-102252 Path Traversal in VMDK Extractor in OSV-SCALIBR

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

PT-2026-102831

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

CVE-2026-102252: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability CWE-22 in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning crafted VMDK images, insufficient validation of archive pat...

The vulnerability in the block/vmdk.c component of the QEMU hardware emulation software allows a hacker to cause a system failure.

The vulnerability of the block/vmdk.c component of the QEMU hardware emulation software is related to reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created VMDK image...

EulerOS Virtualization 2.12.0 : qemu (EulerOS-SA-2026-2802)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked...

EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2026-2867)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2756)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This...

EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2026-2836)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the...

PYSEC-2026-2411 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...

OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...