Lucene search
K

39 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-8778

Malware in sbrugna...

5.5CVSS6.8AI score0.00385EPSS
Exploits0References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-2471

Malware in sbrugna...

5.5CVSS5.7AI score0.00515EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/03/20 12:0 a.m.3 views

PT-2025-12132 · Unknown +1 · Binary-Husky/Gpt Academic +1

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version git 310122f Description: A path traversal vulnerability exists in the application. The application extracts user-provided 7z files without proper validation. The Python py7zr package used for extraction does...

8.8CVSS8.8AI score0.02913EPSS
Exploits1References6
NVD
NVD
added 2025/02/11 10:15 p.m.10 views

CVE-2025-1240

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

8.8CVSS0.26348EPSS
Exploits0References1
CVE
CVE
added 2025/02/11 9:53 p.m.132 views

CVE-2025-1240

Summary: CVE-2025-1240 corresponds to a WinZip 7Z file parsing vulnerability that enables remote code execution via an out-of-bounds/write within the 7Z parser. The issue stems from insufficient validation of user-supplied data, potentially allowing code execution in the affected process. Exploit...

8.8CVSS8AI score0.26348EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/11 9:53 p.m.4 views

CVE-2025-1240 WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

7.8CVSS8.1AI score0.26348EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/02/11 12:0 a.m.6 views

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 7Z files. Th...

7.8CVSS6.9AI score0.26348EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/02 12:0 a.m.20 views

Debian dsa-5652 : python-py7zr-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5652 advisory. - A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via...

9.1CVSS8.4AI score0.25015EPSS
Exploits3References4
0day.today
0day.today
added 2022/12/07 12:0 a.m.238 views

py7zr 0.20.0 Directory Traversal Vulnerability

CVE-2022-44900: path traversal vulnerability in py7zr Directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier allow attackers to read arbitrary files on the local machine via malicious 7z file extraction. CVE-2022-44900...

9.1CVSS9.3AI score0.25015EPSS
Exploits3
Github Security Blog
Github Security Blog
added 2022/12/06 9:30 p.m.34 views

py7zr directory traversal vulnerability

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS8.6AI score0.25015EPSS
Exploits3References7Affected Software1
OSV
OSV
added 2022/12/06 9:30 p.m.23 views

GHSA-M8XW-9X5X-6VH3 py7zr directory traversal vulnerability

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.3CVSS8.9AI score0.25015EPSS
Exploits3References7
OSV
OSV
added 2022/12/06 8:15 p.m.18 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS9.1AI score0.25015EPSS
Exploits3References3
NVD
NVD
added 2022/12/06 8:15 p.m.13 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS0.25015EPSS
Exploits3References3
OSV
OSV
added 2022/12/06 8:15 p.m.14 views

PYSEC-2022-42998

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS6.9AI score0.25015EPSS
Exploits3References7
Prion
Prion
added 2022/12/06 8:15 p.m.15 views

Directory traversal

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

6.4CVSS9AI score0.25015EPSS
Exploits3References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/12/06 8:15 p.m.17 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS7.3AI score0.25015EPSS
Exploits3References3
Cvelist
Cvelist
added 2022/12/06 12:0 a.m.16 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.2AI score0.25015EPSS
Exploits3References3
CVE
CVE
added 2022/12/06 12:0 a.m.82 views

CVE-2022-44900

CVE-2022-44900 : A directory traversal vulnerability in the Python py7zr library (v0.20.0 and earlier) affects SevenZipFile.extractall(), allowing an attacker to write arbitrary files when extracting crafted 7z archives. The issue is documented across multiple advisories (Ubuntu, Debian, OpenVAS,...

9.1CVSS8.8AI score0.25015EPSS
Exploits3References3Affected Software1
Debian CVE
Debian CVE
added 2022/12/06 12:0 a.m.47 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS9.1AI score0.25015EPSS
Exploits3
NVD
NVD
added 2022/04/15 8:15 p.m.21 views

CVE-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the HelpContents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple...

7.8CVSS0.18873EPSS
Exploits8References5
Rows per page
Query Builder