Siber Alem / Detail / 500 / Cve-2026-65010-datasets-symlink-following-arbitrary-file-write-via-extractor-extract
vuln_report_viewer.sh
VULN REPORT / удаленный / ID: 500

CVE-2026-65010 - Datasets Symlink-following Arbitrary File Write via Extractor.extract()

2026-07-29
5 просмотров
CVE-2026-65010
3.1
CVSS Severity Index Low Severity / Düşük Seviye

Сводка

Эта запись подробно описывает уязвимость, обнаруженную в целевой системе. Эксплойт был опубликован 2026-07-29 и набрал 5 просмотров сообщества. Он классифицируется по категории удаленный. Пользователям рекомендуется ознакомиться с исходным кодом во вкладке «Детали» для получения технических подробностей.

exploit_500.txt
<div class="space-y-6 font-sans select-text text-left"><div class="bg-[#1C1C1E] border border-white/5 rounded-lg p-5"><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="info" class="w-3.5 h-3.5 text-[#26A269]"></i>Zafiyet Ozet Bilgileri</h3><div class="grid grid-cols-1 md:grid-cols-2 gap-4 text-sm"><div class="flex items-center gap-2"><span class="text-white/40">Zafiyet Kodu:</span><strong class="text-[#FF5F56] font-mono">CVE-2026-65010</strong></div><div class="flex items-center gap-2"><span class="text-white/40">Siddet Derecesi:</span><span class="font-bold font-mono" style="color:#FFB800">MEDIUM</span></div><div class="flex items-center gap-2"><span class="text-white/40">CVSS Skoru:</span><span class="text-[#FFB800] font-bold font-mono">3.1</span></div><div class="flex items-center gap-2"><span class="text-white/40">Etkilenen Surumler:</span><span class="text-white/80 font-mono text-xs">Products</span></div><div class="flex items-center gap-2"><span class="text-white/40">Yayinlanma Tarihi:</span><span class="text-white/80 font-mono">29.07.2026</span></div></div></div><div><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="file-text" class="w-3.5 h-3.5 text-[#26A269]"></i>Zafiyet Detayı (Turkce)</h3><p class="text-white/70 leading-relaxed text-sm bg-[#1C1C1E]/30 p-4 border border-white/5 rounded-lg">Ad2d853 kesinleştirmesinde düzeltilen 5.00&#039;e kadar olan veri kümeleri, Extractor.extract()&#039;ta, yerel saldırganların öngörülebilir çıktı yollarına önceden sembolik bağlantılar yerleştirerek rastgele dosyalar yazmasına olanak tanıyan bir sembolik bağlantı izleme güvenlik açığı içerir. Saldırganlar, arşiv çıkarma işlemini paylaşılan önbellek ortamlarındaki rastgele dosya sistemi konumlarına yeniden yönlendirerek hassas dosyaların üzerine yazılmasını ve olası ayrıcalık artışını veya…</p></div><div><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="globe" class="w-3.5 h-3.5 text-[#26A269]"></i>Orijinal Aciklama (Ingilizce)</h3><p class="text-white/40 leading-relaxed text-xs bg-[#1C1C1E]/10 p-4 border border-white/5 rounded-lg italic">
    
    
      
        


  
    
      
        
          
          
            
              
                
              
              
                
              
            
            
              
                
              
              
                
              
            
          
          
            
              
              
              
            
          
          
             CVE ID, Product, Vendor ...
          
        
        
          
            
              
            
          
          
            Pricing
          
          
            
              
            
            
              
                
                  
                    Browse by Apps
                  
                  
                     View All Apps
                      
                  
                
              
              
                
                  
                    
                      
                      Splunk
                    
                  
                  
                    
                      
                      Slack
                    
                  
                  
                    
                      
                      Webhook
                    
                  
                  
                    
                      
                      Teams
                    
                  
                  
                    
                      
                      Jira
                    
                  
                  
                    
                      
                      Chrome
                    
                  
                
              
            
          
          
            
              
              
            
          
          
            
              
              
                API
              
            
          
          
              
   </p></div><div><h3 class="text-xs font-bold text-white/50 mb-3 uppercase tracking-wider flex items-center gap-2"><i data-lucide="external-link" class="w-3.5 h-3.5 text-[#26A269]"></i>Referanslar</h3><div class="bg-[#1C1C1E]/10 p-4 border border-white/5 rounded-lg"><a href="https://cvefeed.io/vuln/detail/CVE-2026-65010" target="_blank" class="text-[#3b82f6] hover:underline font-mono text-xs break-all">https://cvefeed.io/vuln/detail/CVE-2026-65010</a></div></div><div class="border-t border-white/5 pt-4 flex justify-between items-center text-xs"><span class="text-white/30">Otomatik olarak RSS feed'inden ice aktarildi.</span><a href="https://cvefeed.io/vuln/detail/CVE-2026-65010" target="_blank" class="inline-flex items-center gap-1.5 text-[#26A269] hover:underline font-bold transition-all">Kaynagi Goruntule <i data-lucide="external-link" class="w-3.5 h-3.5"></i></a></div></div>

Профиль автора

Autopilot
Autopilot Элитный участник
Посмотреть все публикации

Статистика записи

Просмотры 5
Загрузки 0
Комментарии 0
Siber Alem V1 Status: Operational | Exploits: 424 (156 Verified)
Ping: 18ms Lang: RU