7zip-CVE-2025-11001

Usage: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be succesfully exploited...

CVE-2026-104086

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s noids field is set so that the final metadata block’s expected size ...

CVE-2026-104086

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s noids field is set so that the final metadata block’s expected size ...

CVE-2026-104086 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s noids field is set so that the final metadata block’s expected size ...

CVE-2026-104086

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s noids field is set so that the final metadata block’s expected size ...

EUVD-2026-101032

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s noids field is set so that the final metadata block’s expected size ...

CVE-2026-104086

7-Zip versions prior to 26.03 are vulnerable to an uninitialized memory disclosure vulnerability within the SquashFS v4 archive handler (specifically in SquashfsHandler.cpp). An attacker can craft a malicious archive where the superblock’s no_ids field causes a miscomputation of the final metadat...

7-Zip-CVE-2025-0411-POC

🦀 Rust Macros No Recoil image Download 🚀 Overview "Rust Macros No Recoil" offers a seamless experience for reducing weapon recoil in the game Rust. Utilizing efficient scripts and tailored macros, this tool grants players improved control and accuracy during gameplay. It’s optimized for...

CVE-2026-48095

CVE-2026-48095 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to cause arbitrary code execution or...

7-Zip < 24.08 CopyCoder Infinite Loop DoS (ZDI-24-1606)

The version of 7-Zip installed on the remote host is prior to 24.08. It is, therefore, affected by a denial of service vulnerability as referenced in the ZDI-24-1606 advisory. - This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip...

7-Zip < 26.02 XZ Heap Buffer Overflow RCE (ZDI-26-444)

The version of 7-Zip installed on the remote host is prior to 26.02. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-26-444 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User...

CVE-2025-55188

CVE-2025-55188: 7-Zip Arbitrary File Write Proof-of-concept of CVE-2025-55188, an arbitrary file write in 7-Zip. Patched in version 25.01, released on August 3, 2025. Note: CVE-2025-55188 is different than CVE-2025-11001. The version that CVE-2025-11001 was patched in version 25.00 is still...

[SECURITY] Fedora 43 Update: 7zip-26.04-1.fc43

7-Zip is a file archiver with a high compression ratio. The main features of 7-Zip are: High compression ratio in 7z format with LZMA and LZMA2 compression Supported formats: Packing / unpacking: 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM Unpacking only: AR, ARJ, CAB, CHM, CPIO, CramFS, DMG, EXT, FAT,...

[SECURITY] Fedora 44 Update: 7zip-26.04-1.fc44

7-Zip is a file archiver with a high compression ratio. The main features of 7-Zip are: High compression ratio in 7z format with LZMA and LZMA2 compression Supported formats: Packing / unpacking: 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM Unpacking only: AR, ARJ, CAB, CHM, CPIO, CramFS, DMG, EXT, FAT,...

ROS-20260921-73-0001

The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20260921-73-0025

The vulnerability of the CInStream::GetCuSize function in the 7-Zip NTFS archiver lies in the writing beyond buffer boundaries to memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

SUSE CVE-2026-58052

7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...

PatchHawk-PoC

PatchHawk Proofs of Concept This repository publishes vulnera...

7-Zip 26.01 XZ Decoder Heap Buffer Overflow

7-Zip 26.01 contains a heap buffer overflow vulnerability in the XZ decoder that can be triggered while processing a specially crafted XZ archive. This proof of concept generates a malformed XZ file designed to reproduce the crash condition in the vulnerable multi-threaded XZ decompression path...

PT-2026-76206

7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...