Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Django vulnerability (USN-4715-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4715-1 advisory. Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

Heap overflow

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

Multiple ESET products ESET AV parsing engine input validation error vulnerability

ESET Smart Security Premium and others are products of ESET Slovakia.Smart Security Premium is a suite of antivirus programs.Internet Security is a suite of antivirus programs for Internet security.NOD32 Antivirus is a suite of antivirus programs.ESET AV The parsing engine is one of the parsing...

The vulnerability of the __zzipFetchFetchDiskTrailer function in the ZZIPlib library allows a hacker to trigger a service failure.

The vulnerability of the zzipfetchdisktrailer function in the ZZIPlib compression library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially created zip file...

The vulnerability of the archive_wstring.AppendFrom_MBS function in the OpenLDAP package allows a hacker to read the memory contents of the system.

The vulnerability of the archivewstringappendfrommbs function in the archivestring.c file of the OpenLDAP package involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to read memory contents using a specially created archive file...

Arbitrary Code Execution

libarchive.so is vulnerable to arbitrary code execution. A use-after-free bug exists in the function archivereadformatrarreaddata in archivereadsupportformatrar.c as it does not properly handle archive files, allowing an attacker to execute arbtirary code in certain ARCHIVEFAILED situation by...

Stack overflow

Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim to open a specially-crafted ISO archive file, an attacker could execution arbitrary code...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created ARF or WRF fil...

WinRAR 5.61 - Path Traversal

WinRAR 5.61 - Path Traversal !/usr/bin/env python3 import os import re import zlib import binascii The archive filename you want rarfilename = "test.rar" The evil file you want to run evilfilename = "calc.exe" The decompression path you want, such shown below targetfilename =...

WinRAR 5.61 - Path Traversal

!/usr/bin/env python3 import os import re import zlib import binascii The archive filename you want rarfilename = "test.rar" The evil file you want to run evilfilename = "calc.exe" The decompression path you want, such shown below targetfilename = r"C:\C:C:../AppData\Roaming\Microsoft\Windows\Sta...

CVE-2019-7731

MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...

Directory traversal

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...

DEBIAN-CVE-2015-9275

ARC 5.21q allows directory traversal via a full pathname in an archive file...