CVE-2025-8088

安全分析：WinRAR 中的路径遍历漏洞利用（CVE-2025-8088） 注意： 仓库正在开发中。本项目将获得未来更新，包含额外的分析、 分析 （非利用）脚本和演示材料。新版本将在可用时发布。 本仓库记录了 WinRAR（CVE-2025-8088 ）中目录遍历 （CWE-35）漏洞的分析、研究过程和概念验证（PoC）。 该漏洞影响 7.13 之前版本的 Windows 版 WinRAR，已被评为高 严重性（基础评分 8.8）。 I. 感染过程：从 ZIP 文件到任意代码执行 CVE-2025-8088 的成功在于受害者所需交互的简单性：仅需解压一个恶意文件即可触发代码执行 。...

EUVD-2024-41387

Malicious code in bioql PyPI...

EUVD-2025-4166

Malicious code in bioql PyPI...

CVE-2025-26353

A CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...

CVE-2025-26352

The CVE-2025-26352 entry documents a CWE-35 path traversal in the template deletion mechanism of Q-Free MaxTime (≤ v2.11.0). An authenticated remote attacker can delete sensitive files via crafted HTTP requests, due to the insecure handling in the deletion path. Impact is described as the ability...

CVE-2024-45248 Multi-DNC – CWE-35: Path Traversal: '.../...//'

Multi-DNC – CWE-35: Path Traversal: '.../...//'...

GHSA-G54F-66MW-HV66 Agnai vulnerable to Relative Path Traversal in Image Upload

Summary A vulnerability has been discovered in Agnai that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for...

GHSA-H355-HM5H-CM8H Agnai File Disclosure Vulnerability: JSON via Path Traversal

CWE-35: Path Traversal https://cwe.mitre.org/data/definitions/35.html CVSSv3.1 4.3 - Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Summary A vulnerability has been discovered in Agnai that permits attackers to read arbitrary JS...

Franklin Electric Fueling Systems Colibri

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Franklin Electric Fueling Systems Equipment : Colibri Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Artica Proxy VMWare Appliance 4.30.000000 SP273 Path Traversal

Advisory ID: RCS20210707-0 Product: Artica Proxy VMWare Appliance Vendor/Manufacturer: ArticaTech https://www.articatech.com Affected Versions: 4.30.000000 =SP273 Tested Versions: 4.30.000000 SP273 Vulnerability Type: Relative path traversal CWE-23, Improper Limitation of a Pathname to a restrict...