10240 matches found
Remote code execution
In CMS Made Simple CMSMS through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because a .php file can be present in the extracted ZIP archive...
CVE-2018-10515
CMS Made Simple (CMSMS) up to version 2.2.7 is affected by a remote code execution vulnerability in the admin dashboard’s file unpack operation. The underlying issue is that the extracted ZIP archive may contain a .php file, which an admin user can trigger to execute code on the server. If unpatc...
Metamorfo Campaigns Targeting Brazilian Users
FireEye Labs recently identified several widespread malspam malware spam campaigns targeting Brazilian companies with the goal of delivering banking Trojans. We are referring to these campaigns as Metamorfo. Across the stages of these campaigns, we have observed the use of several tactics and...
archive.asia.si.edu XSS vulnerability
Open Bug Bounty ID: OBB-606327 Description| Value ---|--- Affected Website:| archive.asia.si.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview net.lingala.zip4j:zip4j is a open source java library to handle zip files. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. Successful exploitation of this vulnerability can result in remote command execution. Details It is exploit...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview org.codehaus.plexus:plexus-archiver is a Collection of Plexus components to create archives or extract files out of an archive to a directory with a unified Archiver/UnArchiver API whatever the archive format is. Affected versions of the package are vulnerable to Arbitrary File Write via...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview sharpcompress is a compression library for .NET Standard 1.0 that can unrar, decompress 7zip, decompress xz, zip/unzip, tar/untar lzip/unlzip, bzip2/unbzip2 and gzip/ungzip with forward-only reading and file random access APIs. Affected versions of the package are vulnerable to Arbitrary...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview dotnetzip is a class library and toolset for manipulating zip files. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, ...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview github.com/mholt/archiver/cmd/archiver makes it trivially easy to make and extract common archive formats such as .zip, and .tar.gz. Simply name the input and output files. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It i...
ReconCat - Tool To Fetch Archive Url Snapshots From Archive.org
A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose. This application is powered byWMB-Scrapper Installation Clone this...
PYSEC-2018-83
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
CVE-2017-0359
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
Design/Logic Flaw
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
DEBIAN-CVE-2017-0359
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
PYSEC-2018-83
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
UBUNTU-CVE-2017-0359
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
CVE-2017-0359 diffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
CVE-2017-0359
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...
CVE-2017-0359
Diffoscope is vulnerable to arbitrary file overwrite: versions before 77-1 may write to arbitrary locations on disk based on untrusted archive contents. Upstream fix shipped in 77; advisories (Arch Linux ASA-201702-14, Fedora updates, Debian/CVE records) note upgrade to 77-1 or newer to mitigate....
roundcube -- IMAP command injection vulnerability
Upstream reports: This update primarily fixes a recently discovered IMAP-cmd-injection vulnerability caused by insufficient input validation within the archive plugin. Details about the vulnerability are published under CVE-2018-9846...