CVE-2025-50329

An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...

CVE-2025-50329

An issue in ConeXware, Inc Power Archiver versions v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe executable. To remediate this vulnerability, users should update ConeXware, Inc Power Archiver to version 22.00.12 or later . Ex...

CVE-2025-50329

An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...

CVE-2025-50329: Protection Mechanism Failure

An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the ZipArchiver and GPM\Installer process. An attacker can exhaust disk spa...

CVE-2026-61449

Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each entry's ZIP central-directory header ZipArchive::statIndex'size' and rejects archives exceeding...

CVE-2026-61449

Summary of CVE-2026-61449 (Grav): Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM Installer. The new per-entry size bound (ZipArchive::statIndex()['size']) is summed against system.gpm.archive.max_uncompressed_size and blocks extraction before it, but the declared ...

CVE-2026-61449

Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each entry's ZIP central-directory header ZipArchive::statIndex'size' and rejects archives exceeding...

CVE-2026-61449 Grav before 2.0.2 Decompression Bomb via Forged ZIP Size

Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each entry's ZIP central-directory header ZipArchive::statIndex'size' and rejects archives exceeding...

CVE-2026-61449 Grav before 2.0.2 Decompression Bomb via Forged ZIP Size

Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each entry's ZIP central-directory header ZipArchive::statIndex'size' and rejects archives exceeding...

PT-2026-60144

Name of the Vulnerable Software and Affected Versions Grav version 2.0.1 Description A decompression-bomb size-cap bypass exists in ZipArchiver and GPMInstaller. The system calculates the uncompressed size by summing the values declared in each entry's ZIP central-directory header via...

CVE-2026-61455

Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. A crafted ZIP archive can expand to fill available disk space, causing denial of service by exhausting storage resources. This CVE (CVE-20...

CVE-2026-61455 Grav before 2.0.1 Decompression Bomb via ZipArchiver

Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage...

PT-2026-57198

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.1 Description A decompression bomb issue exists in the ZipArchiver::extract function. The function does not impose limits on the number of files, nesting depth, or the total uncompressed size of archives. An attacker...

data-portal-archiver (>=0.0.1, <=0.1.14), gharbala (>=0.1.1, <=0.1.9) potentially affected by CVE-2025-58438 via internetarchive (2.3.0)

internetarchive PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on internetarchive and may be impacted: - data-portal-archiver =0.0.1, =0.1.1, =0.1.9 Source cves: CVE-2025-58438 Source advisory: OSV:PYSEC-2026-357...

Malicious code in kecak256 (npm)

kecak256 is a typosquat of the popular keccak256 package one c dropped that ships a credential-stealing payload executed automatically on install. The package spoofs the legitimate keccak256 project — author "Miguel Mota", matching description, README, and keywords — and includes a benign decoy...

MAL-2026-5342 Malicious code in kecak256 (npm)

kecak256 is a typosquat of the popular keccak256 package one c dropped that ships a credential-stealing payload executed automatically on install. The package spoofs the legitimate keccak256 project — author "Miguel Mota", matching description, README, and keywords — and includes a benign decoy...

CVE-2026-20240

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13, and 9.3.2411.129, a low-privileged user that does not hold the ‘admin’ or ‘power’ Splunk roles could cause a Denial ...

PT-2026-48838

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files...

7-Zip NTFS Heap Buffer Overflow DoS

The vulnerability of the CInStream::GetCuSize function in the 7-Zip NTFS archiver lies in the writing beyond buffer boundaries to memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...