Lucene search
+L

79 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:00 a.m.•31 views

Linux Distros Unpatched Vulnerability : CVE-2026-39973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in...

7.1CVSS6.9AI score0.00182EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2026/04/23 9:24 p.m.•37 views

GHSA-M8MH-X359-VM8M Apktool: Path Traversal to Arbitrary File Write

A path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a security regression introduced in commit e10a045 PR 4041, December 12, 2025, which removed the...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2026/04/23 9:24 p.m.•28 views

Apktool: Path Traversal to Arbitrary File Write

A path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a security regression introduced in commit e10a045 PR 4041, December 12, 2025, which removed the...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2026/04/23 9:24 p.m.•22 views

EUVD-2026-24043

Apktool: Path Traversal to Arbitrary File Write...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/04/23 7:22 a.m.•22 views

CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/21 2:16 a.m.•20 views

CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS0.00182EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/04/21 2:16 a.m.•19 views

CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7.1AI score0.00182EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2026/04/21 2:16 a.m.•19 views

UBUNTU-CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/04/21 1:35 a.m.•23 views

CVE-2026-39973 Apktool: Path Traversal to Arbitrary File Write

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7.2AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/04/21 1:35 a.m.•45 views

CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7AI score0.00182EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/04/21 1:35 a.m.•57 views

CVE-2026-39973 Apktool: Path Traversal to Arbitrary File Write

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS0.00182EPSS
SaveExploits1References4
CVE
CVE
•added 2026/04/21 1:35 a.m.•220 views

CVE-2026-39973

CVE-2026-39973 affects Apktool up to version 3.0.1, where a path traversal flaw in BrutIO/ResFileDecoder.java allows a crafted APK to write arbitrary files to the host filesystem during decoding. The issue arises from removal of the path-sanitizing call (BrutIO.sanitizePath()) in the decoding pat...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/21 1:35 a.m.•12 views

CVE-2026-39973 Apktool: Path Traversal to Arbitrary File Write

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References4
Mend
Mend
•added 2026/04/21 1:35 a.m.•4 views

CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in "brut/androlib/res/decoder/ResFileDecoder.java" allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding "apktool d". This is a...

8.4CVSS7AI score0.00182EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/21 12:00 a.m.•4 views

CVE-2026-39973: Improper Limitation of a Pathname to a Restricted Directory

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

7.1CVSS7.1AI score0.00182EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/04/21 12:00 a.m.•24 views

Apktool path traversal vulnerability

Apktool is a reverse-engineering tool for Android APK files developed by Connor Tumbleson. Versions 3.0.0 and 3.0.1 of Apktool contain a path traversal vulnerability. This vulnerability stems from a path traversal issue in the brut/androlib/res/decoder/ResFileDecoder.java file. It could allow a...

7.1CVSS7.5AI score0.00182EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/19 12:00 a.m.•20 views

PT-2026-33645

Name of the Vulnerable Software and Affected Versions Apktool versions 3.0.0 through 3.0.1 Description A path traversal issue in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding using the apktool d...

7.1CVSS7.3AI score0.00182EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
•added 2025/05/23 9:37 a.m.•18 views

CVE-2024-24482

Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal...

9.8CVSS8.6AI score0.01158EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2024-21633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource...

7.8CVSS7AI score0.01331EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/02/05 11:15 a.m.•19 views

CVE-2024-21633

Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are...

7.8CVSS7.1AI score0.01331EPSS
SaveExploits2References1
Rows per page
Query Builder