安全情报专区 24+

Rclone Local Backend Encoding Path Traversal Vulnerability and Fix

PowerShell Command Injection Fix: Handling Unicode Quotes in Shell Escape

Restic serve restic Path Traversal Leading to Directory Traversal (Pre-Auth)

rclone SFTP Filename Injection RCE via PowerShell Unicode Quotes (CVE-2026-7232)

Path Traversal (CWE-22) Vulnerability Fix and POC

libproxy http.go Unrestricted HTTP CONNECT Response Headers Leading to OOM

rclone Unbounded HTTP CONNECT Response Headers Memory Exhaustion Vulnerability

Rclone FTP CRLF Injection Vulnerability (CVE-2026-7111) Analysis

FTP Command Injection via CRLF in GoFTP Library (Fix Detail)

Git Fix: Symlink Escape via git clone --links Leading to Arbitrary File Write

rclone CVE-2026-54572 Symlink Escape Arbitrary File Write Vulnerability and Fix

rclone Unvalidated symlink target in --links leading to Arbitrary File Write

rclone serve restic Authorization Bypass via Path Traversal

Restic 'serve restic' --private-repos Path Traversal Authorization Bypass (CVE-2026-59733)

Restic CVE-2020-59733: Path Traversal Allows Unauthorized Access to Other Users' Private Repos

### 漏洞概述 - **漏洞名称**: `serve restic: fix --private-repos isolation bypass CVE-2020-59733` - **描述**: 用户可以通过发送类似 `../victim/config` 的路径来访问另一个用户的私有仓库。授权检查将第一个路径段与经过身份验证的用户进行比较，而后端对象键是从原始、未清理的 URL 路径构建的。 -…

archive/extract Path Traversal (Zip Slip) Vulnerability Fix and POC

Path Traversal (Zip Slip) Vulnerability in archive/extract Module and Fix

rclone archive extract Path Traversal Vulnerability (Pre-Auth/0day Context)