CVE-2026-87910

A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly...

PT-2026-91199

In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk...

CVE-2025-8088

CVE-2025-8088 : WinRAR の NTFS ADS を悪用したパストラバーサル 📌 エグゼクティブサマリー CVE-2025-8088 は、WinRAR バージョン7.11以前 における重大なパストラバーサル脆弱性です。この欠陥は、NTFS Alternate Data Streams ADS を利用するアーカイブエントリのファイル名をアプリケーションが処理する方法に存在します。抽出エンジンにストリームの境界を誤解させることで、攻撃者はユーザーの意図した抽出ディレクトリをバイパスし、Windowsの Startup...

Poc-CVE-2024-21542

Poc-CVE-2024-21542 概述 luigi是一个帮助您构建复杂批处理作业管道的包。它处理依赖解析、工作流管理、可视化、故障处理、命令行集成等众多功能。 由于在extractpackagesarchive函数中对目标文件路径验证不当，该包受影响版本存在通过存档提取（Zip Slip）实现任意文件写入的漏洞。 详情...

CVE-2025-6218-POC

CVE-2025-6218 概念実証（POC） 概要 このリポジトリには、CVE-2025-6218 の簡単な概念実証（POC）が含まれており、WinRAR のアーカイブ展開パスの処理に関する脆弱性の悪用を実証します。POC のバッチスクリプトは、ユーザーログイン時に calc.exe を実行するバッチファイルを Windows のスタートアップフォルダーに配置する ZIP アーカイブを作成します。 仕組み バッチスクリプト（CVE-2025-6218.bat）は、Windows の電卓（calc.exe）を実行する単純なバッチファイル（POC.bat）を生成します。 次に、WinRAR...

CVE-2021-3281

CVE-2021-3281 django.utils.archive.pyのlineno:171、Class TarArchiveにディレクトリトラバーサルの脆弱性があります。 関数呼び出しos.path.jointopath, nameはパラメータ"name"をチェックしていません。もし誰かがWindowsプラットフォームでこのユーティリティを使用すると、ディレクトリトラバーサルのリスクがあります。POCは以下です： root@kitploit: from django.utils import archive archive.extract'test.tar','.'...

EUVD-2026-76748

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-90445

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-90445

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-90445

CVE-2026-90445 is a path traversal vulnerability in an interface that accepts file uploads from authenticated users . The root cause is that uploaded archives are extracted without validating that file paths remain within the intended destination directory, allowing an attacker to write files to ...

CVE-2026-90445

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

EUVD-2026-75787

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction...

PT-2026-90513

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...

CVE-2026-80424

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction...

CVE-2026-80424

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is affected by a path traversal vulnerability (CWE-22) that occurs during archive extraction , allowing a remote authenticated attacker to create arbitrary files. The flaw is rated CVSS 9.1 (Critical) with a scope change, reflecting high integri...

CVE-2026-80424 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction...

EUVD-2026-75186

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...

CVE-2026-88069

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...

CVE-2026-88069

Pandora (a file-analysis platform) contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths are not validated to ensure the destination remains within the intended extraction directory, allo...