archiver-MOTW-support-comparison

Comparison of MOTW Mark of the Web propagation support of archiver software for Windows English | Japanese Background On 3 March 2022, Microsoft announced that the default behavior of Office applications on Windows will be changed to block macros in files from the internet such as email attachmen...

PoC-CVE-2019-10743

Demo de Zip Slip Este proyecto demuestra la vulnerabilidad Zip Slip CVE-2019-10743 usando la versión vulnerable del paquete mholt/archiver. ¿Qué es Zip Slip? Zip Slip es una vulnerabilidad descubierta por los investigadores de seguridad de Snyk. Se encontró que la vulnerabilidad afecta a múltiple...

CVE-2025-43920

CVE-2025-43920：GNU Mailman 2.1.39（cPanel/WHM 捆绑版）中通过邮件主题实施的命令注入 发现者： Firudin Davudzada 与 Musazada Aydan 公开日期： 2025年4月 CVE ID： CVE-2025-43920 严重性： 5.4 中等 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N 攻击类型： 远程 受影响软件： GNU Mailman 2.1.39（捆绑于 cPanel/WHM） 概述 GNU Mailman 2.1.39 在随 cPanel 和 WHM...

codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5

Plexus-archiver El master actual está ahora en https://github.com/codehaus-plexus/plexus-archiver Notas de la versión Puedes encontrar detalles sobre las diferentes versiones en las Notas de la versión. Versión 3.4. Versión 3.3. Versión 3.2...

codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1

Plexus-archiver El master actual está ahora en https://github.com/codehaus-plexus/plexus-archiver Aviso Importante Basándose en una sugerencia del equipo de seguridad de snyk.io, han encontrado un posible problema de seguridad. Además, han ofrecido un parche para prevenir el posible problema de...

CVE-2024-0406-POC

CVE-2024-0406 Prueba de concepto PoC Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-0406 , una vulnerabilidad relacionada con la extracción de archivos tar basada en enlaces simbólicos que permite el recorrido de rutas path traversal o la sobrescritura de archivos en...

ROS-20260921-73-0025

The vulnerability of the CInStream::GetCuSize function in the 7-Zip NTFS archiver lies in the writing beyond buffer boundaries to memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

RHSA-2023:6886 Red Hat Security Advisory: plexus-archiver security update

Bulletin has no description...

CVE-2026-48536

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuration that allows authenticated attackers to inject arbitrary web script or HTML via the SMTP server address parameter to /Archiver/GeneralSettingsWizard.aspx. The injected payload ...

CVE-2026-48539

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

CVE-2026-48537

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...

CVE-2026-48538

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary web script or HTML via the configured folders parameter to /Archiver/ImportSettingsWizard.ashx. The injected payload ...

CVE-2026-48531

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/RetentionPolicyWizard.aspx. The injected payload is stored by...

CVE-2026-48532

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/FAARetentionPolicyWizard.aspx. The injected paylo...

CVE-2026-48534

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The injected payload is stored by...

CVE-2026-48530

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/CategorizationPolicyWizard.aspx. The...

CVE-2026-48535

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the proxy server address parameter to /Archiver/CallHomeSettingsWizard.aspx. The injected paylo...

CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

CVE-2026-48539 GFI Archiver < 15.13 Stored XSS via MailInsights.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored...

CVE-2026-48539

GFI Archiver prior to 15.13 is affected by CVE-2026-48539: a stored XSS in the MailInsights.aspx report naming parameter. An authenticated user can inject script/HTML that is stored by ReportScheduling.btnSaveReport_Click() and later executes in the viewer’s browser when they access the MailInsig...