251 matches found
RAR-Anomaly-Inspector
RAR Anomaly Inspector RAR Anomaly Inspector is a read-only PowerShell tool for static inspection of RAR archives , designed to detect path traversal anomalies related to CVE-2025-8088 WinRAR RAR5 Path Traversal. The tool does not extract or execute archive contents. Features Static, read-only...
Amaranth-Project
Amaranth Project Utilize CVE-2025-8088 WinRAR path traversal vulnerability, ≤ 7.11 to implement a multi-stage backdoor implantation attack chain. 诱饵文档 → 恶意RAR → CVE触发 → ADS写入 → Stager执行 → 文件加载 → C2上线 Project Structure Directory| Content ---|--- Stage01Stage07/| Source code and test scripts for...
CVE-2018-7422
CVE-2018-7422 nuclei -u http://target:8088 -t cve-2018-7422.yaml...
CVE-2025-8088-Winrar
CVE-2025-8088 WinRAR Exploitation Advanced WinRAR Path Traversal Exploitation Tool A sophisticated GUI tool for creating malicious RAR files that exploit the WinRAR path traversal vulnerability CVE-2025-8088 by manipulating ADS and RAR5 headers. Features ADS Exploitation - NTFS alternate data...
CVE-2015-8088
CVE-2015-8088 Source of PoC code. Detail of the CVE: https://vulners.com/cve/CVE-2015-8088 Detail of the Vulnerability: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...
WinRAR-Exploit-Tool---Rust-Edition
WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path Traversal Exploit Tool - Written in Rust A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance. Features ADS Exploitation - NTFS Alternate Data...
winrar-exploit
Description This is my implementation of the CVE-2025-8088 Winrar exploit. It uses Alternate Data Streams ADS and path patching within the archive. When a victim extracts the infected archive, the patched ADS payload e.g., executable, powershell script, or some funny png is redirected into the...
CVE-2025-8088-Exploit
CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...
CVE-2025-8088-EXP
This repository does not have a README...
WinRAR-CVE-2025-8088-PoC-RAR
WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...
Cve-2025-8088-WinRar-vulnerability
Cve-2025-8088 WinRAR Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for...
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States CIS. The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of...
Rocky Linux 9.2 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ciqsa-2026_1132)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261132 advisory. This advisory aggregates security fixes for the python3.9 SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-8088, CVE-2024-6923, CVE-2024-6232. Tenable...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR Archive Integrity Validator !Validator...
winrar-exploit
Descrizione Questa è la mia implementazione dell'exploit CVE-2025-8088 per Winrar. Utilizza Alternate Data Streams ADS e il path patching all'interno dell'archivio. Quando una vittima estrae l'archivio infetto, il payload ADS patchato ad es., eseguibile, script powershell o qualche png divertente...
CLEANSTART-2026-VQ66672 Security fixes in python3 3.12.3-r2
Package python3 version 3.12.3-r2 fixes 1 vulnerabilities: CVE-2024-8088...
CVE-2026-8088 vulnerabilities
Vulnerabilities for packages: gdal...
Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships...
py-rate (0.2.0) potentially affected by CVE-2026-8088 via gdal (2.1.3)
gdal PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - py-rate 0.2.0 Source cves: CVE-2026-8088 Source advisory: OSV:GHSA-J3F5-RW74-G4RV...
