CVE-2018-1002201

CVE-2018-1002201 affects the zt-zip library prior to 1.13. The flaw is a directory traversal in a Zip archive entry that, when mishandled during extraction, allows writing to arbitrary files. This is the classic Zip-Slip issue. Public sources in the connected documents confirm the affected compon...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-9623

Name of the Vulnerable Software and Affected Versions: zt-zip versions prior to 1.13 Description: The issue allows attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This is also known as 'Zip-Slip'. Recommendations: For...

CVE-2018-1002201: Improper Limitation of a Pathname to a Restricted Directory

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

Arbitrary File Write

zt-zip is vulnerable to arbitrary file write. The application does not properly validate the destination filepath during compressed file extraction, allowing a malicious user to overwrite files in the target directory...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview org.zeroturnaround:zt-zip is a library that helps to create, modify or extract ZIP archives. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal...

zt.delta.com XSS vulnerability

Vulnerable URL: https://zt.delta.com/smlogin/skymilesloginNow.action?refreshURL=%22%3E%3Caudio/onloadstart=%28confirm%28%22OPENBUGBOUNTY%22%29%29%20src%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Joomla! ZT Autolinks组件'controller'参数本地文件包含漏洞

Bugtraq ID:56994 Joomla!是一款开放源码的内容管理系统CMS。 Joomla! ZT Autolinks组件不正确过滤用户提交给'controller'参数的数据，允许攻击者利用漏洞通过目录遍历攻击获得系统文件内容。 0 Joomla! ZT Autolinks Component 厂商解决方案 目前没有详细解决方案提供： http://Joomla.org...