CVE-2025-8088-Multi-Document

WinRAR पथ ट्रैवर्सल शोषण CVE-2025-8088 - बहु-गहराई पेलोड तैनाती यह Python स्क्रिप्ट WinRAR में एक पथ ट्रैवर्सल कमजोरी CVE-2025-8088 का शोषण करती है ताकि विंडोज स्टार्टअप फ़ोल्डर में एकाधिक सापेक्ष पथ गहराइयों का उपयोग करके पेलोड तैनात किए जा सकें। यह शोषण एक दुर्भावनापूर्ण RAR संग्रह बनाता है जो...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 Herramienta de path traversal para WinRAR ⚠ Esta herramienta se crea únicamente con fines educativos. El uso no autorizado fuera de entornos controlados está estrictamente prohibido. Un script de Python que explota CVE-2025-8088, una vulnerabilidad de path traversal en WinRAR,...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Prova de Conceito PoC-Exploit Este repositório contém um script de Prova de Conceito PoC para CVE-2025-8088 , uma vulnerabilidade de path traversal no WinRAR até a versão 7.12. Esta PoC demonstra como atacantes poderiam explorar a vulnerabilidade para colocar arquivos...

winrar-exploit

Descripción Esta es mi implementación del exploit de Winrar CVE-2025-8088. Utiliza flujos de datos alternativos ADS y parcheo de rutas dentro del archivo. Cuando una víctima extrae el archivo infectado, la carga útil ADS parcheada por ejemplo, un ejecutable, un script de PowerShell o un png...

CVE-2025-8088-Exploit

CVE-2025-8088 WinRAR Exploit 🔓 Uma prova de conceito para a vulnerabilidade do WinRAR CVE-2025-8088 que afeta as versões 7.12 e anteriores. Esta ferramenta cria um arquivo RAR malicioso que incorpora payloads em Alternate Data Streams ADS com path traversal, potencialmente levando à execução...

CVE-2025-8088-WinRAR-PathTraversal-PoC

CVE-2025-8088 WinRAR Path Traversal Exploit PoC Ein Proof-of-Concept-Exploit, das die WinRAR-Pfad-Traversal-Schwachstelle CVE-2025-8088 für Versionen ≤ 7.12 demonstriert. Details zur Sicherheitslücke CVE-ID : CVE-2025-8088 CVSS-Score : 8.4 Hoch Betroffene Versionen : WinRAR ≤ 7.12 Patch-Version :...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ केवल शैक्षिक और अनुसंधान उद्देश्यों के लिए ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 विषय सूची अवलोकन विशेषताएँ आवश्यकताएँ इंस्टालेशन उपयोग तकनीकी विवरण स्क्रीनशॉट अस्वीकरण योगदान 🎯 अवलोकन CVE-2025-8088 एक काल्पनिक कमज़ोरी प्रदर्शन उपकरण है जो RAR...

WinRAR-CVE-2025-8088-Path-Traversal-PoC

PoC per CVE-2025-8088: Path Traversal in WinRAR Descrizione della vulnerabilità ☢️ CVE-2025-8088 CVSS 8.4 è una vulnerabilità di path traversal in WinRAR ≤7.12 che consente di posizionare file al di fuori della directory di estrazione tramite flussi di dati alternativi ADS in un archivio RAR. Vien...

best-CVE-2025-8088

CVE-2025-8088 Exploit do WinRAR 🔓 Um exploit de prova de conceito para a vulnerabilidade do WinRAR CVE-2025-8088 que afeta as versões 7.12 e anteriores. Esta ferramenta cria um arquivo RAR malicioso que incorpora payloads em Alternate Data Streams ADS com path traversal, potencialmente levando à...

Kibana 9.1.x < 9.4.5 / 9.5.x < 9.5.1 Privilege Escalation (ESA-2026-128)

The version of Kibana installed on the remote host is 9.1.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-128 advisory. - Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege...

EUVD-2026-62506

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792

Algernon (a pure-Go web server) prior to 1.17.9 is vulnerable to server-side script source disclosure on Windows via NTFS filename aliasing. The root cause is in engine/handlers.go: filepath.Ext() does not recognize NTFS-equivalent suffixes (::$DATA, trailing dot, trailing space) as the script ex...

CVE-2026-72631

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

EUVD-2026-58220

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-54200

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user....

CVE-2026-54200

The CVE-2026-54200 entry concerns Tobit Laboratories AG TeamDavid’s Webbox. It describes a local file inclusion vulnerability in the “send email, fax, SMS, etc.” function accessible via the form field scjob where an the command like @@attach can attach files to a message, enabling an authenticate...

CVE-2026-54200 TeamDavid: Local File Inclusion via the form field 'scjob'

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user....

EulerOS 2.0 SP13 : mutt (EulerOS-SA-2026-2982)

According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest.CVE-2026-43859 In mutt before 2.3.2, the imapauthgss...