cve-2023-38831

CVE-2023-38831 Verwundbar: WinRAR = 6.22 https://www.win-rar.com/ Verwendung: root@kitploit: python3 cve-2023-38831.py filename payloadname archivename Referenzen: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ https://xakep.ru/2023/08/24/winrar-0day/ Telegram: https://t.me/ptsoft...

cve-2023-38831

CVE-2023-38831 PoC dell'exploit WinRAR Questo repository contiene uno script Python proof-of-concept PoC per lo sfruttamento di CVE-2023-38831, una vulnerabilità in WinRAR versioni...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 è una vulnerabilità di directory traversal in WinRAR che consente a un attaccante di posizionare file al di fuori della directory di estrazione prevista quando un utente estrae un archivio .rar appositamente creato. Sfruttando questa fall...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Versione Inferiore alla 6.23 Panoramica Questo repository contiene una piccola utility desktop/console per Windows scritta in C .NET Framework 4.8 che mostra una tecnica di struttura degli archivi comunemente discussa in contesti di ricerca...

-CVE-2025-8088

-CVE-2025-8088 Script POWERSHEL per verificare se il tuo dispositivo è interessato o meno 🚨 CVE-2025-8088: Allerta Zero-Day di WinRAR! 🚨 Una vulnerabilità critica di WinRAR CVE-2025-8088 sta facendo notizia: gli aggressori possono sfruttare questa falla nelle versioni 7.13 per eseguire codice...

hack-winrar

hack-winrar WinRar è un software molto conosciuto per Windows. La versione precedente di WinRaR presentava una vulnerabilità che è stata corretta a Febbraio 2019. La maggior parte delle persone non ha aggiornato WinRar, quindi sono vulnerabili a questo bug di Absolute Path Traversal CVE-2018-2025...

CVE-2023-38831

CVE-2023-38831 exploit di winrar 6.22 = PoC veloce root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc esempio di utilizzo root@kitploit: python3 simplefile.txt script.bat output.zip...

CVE-2023-38831-WinRAR-Vulnerability-Analysis

CVE-2023-38831-WinRAR-Vulnerability-Analysis Dieses Projekt ist ein Cybersicherheits-Forschungs- und Analyseprojekt, das sich auf CVE-2023-38831 konzentriert, eine kritische WinRAR-Schwachstelle, die es Angreifern ermöglicht, bösartigen Code durch speziell gestaltete Archivdateien auszuführen. Da...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - Il Resiliente Path Traversal Disclaimer: Questo contenuto ha esclusivamente scopo didattico e di ricerca. Non utilizzare queste informazioni per attività dannose. Oggi facciamo un'analisi approfondita di un'affascinante vulnerabilità di path traversal, traccia...

CVE-2018-20250

exp per Estrarre l'esecuzione di codice da Winrar PoC di Ridter Come usare? Ti basta installare Python 3.7, preparare un file malevolo che vuoi eseguire, impostare i valori desiderati, questo script exp genererà automaticamente il file archivio malevolo! 1. Imposta i valori che desideri...

Astra Linux – Vulnerability in p7zip

Ppmd7.c in 7-ZIP before 23.00 allows for integer underflow and invalid read operations due to a crafted 7Z archive...

CVE-2026-66485 Uncontrolled Memory Allocation in GNU cpio

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...

CVE-2026-18508

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...

CVE-2026-18508 Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...

CVE-2026-54727 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-24727

The CVE-2026-24727 entry describes an unrestricted file upload vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System (v10.3). An authenticated administrator can upload a crafted ZIP archive containing a server-executable file to achieve remote code exec...

CVE-2025-44090

An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

CVE-2025-44089

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

PT-2026-63488

Name of the Vulnerable Software and Affected Versions OhSoft CoffeeZip version 4.8.0.0 Description An issue allows attackers to execute arbitrary code when a user downloads and executes a specially crafted archive file. Recommendations At the moment, there is no information about a newer version...

CVE-2025-44089

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...