CVE-2018-20250

exp para Extrayendo ejecución de código de Winrar poc por Ridter ¿cómo se usa? solo necesitas instalar python 3.7, preparar un archivo malicioso que quieras ejecutar, configurar los valores que quieras, ¡este script exp generará el archivo comprimido malicioso automáticamente! 1. establece los...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR 漏洞利用工具 root@kitploit: | || | \ / / | / | | | | 高级 WinRAR 路径遍历漏洞利用工具 一个精密的 GUI 工具，用于创建利用 WinRAR 路径遍历漏洞 CVE-2025-8088 的恶意 RAR 存档，通过 ADS 和 RAR5 头部操作实现。 功能特性 ADS 利用 - NTFS 备用数据流用于隐藏载荷 RAR5 头部操作 - 直接修补头部以进行路径注入 GUI 界面 - 简洁、现代的用户界面 启动项定位 - 自动将载荷放置到 Windows 启动项 自定义诱饵支持 -...

CVE-2023-38831_Exploit

CVE-2023-38831 漏洞利用概念验证 概述 此仓库包含一个 Python 脚本，展示了针对 CVE-2023-38831 的概念验证（PoC）利用。该漏洞利用特定文件处理机制中的缺陷，通过恶意 RAR 文件执行反向 Shell 载荷。 免责声明： 本项目仅用于教育目的和合乎道德的安全研究。未经事先同意，未经授权使用此代码入侵系统或网络是非法且不道德的。作者不承担任何因滥用造成的责任。 工作原理 该脚本自动化创建恶意 RAR 文件的过程，利用 CVE-2023-38831 漏洞。它将 Python 反向 Shell 脚本嵌入到精心构造的文件结构中，从而隐蔽地执行。 执行步骤： 1...

SideCopy-Exploits-CVE-2023-38831

SideCopy 利用 CVE-2023-38831 CVE-2023-38831 是 WinRAR 中的一个远程代码执行（RCE）漏洞，影响 6.23 之前的 WinRAR 版本。攻击者可以利用该漏洞：恶意压缩包中同时包含一个正常文件和一个与该文件同名的文件夹。通常，该文件夹包含恶意软件，当受害者试图打开看似无害的文件时，恶意软件会被执行。 在此示例 RAR 文件中，有一个良性的 PDF 文件，而文件夹内则包含一个携带恶意软件的可执行文件。 如果受害者使用的是 6.23 之前的 WinRAR 版本，并试图打开看似无害的 PDF 文档，恶意软件将被执行。 PoC 视频：...

Tarmageddon-CVE-2025-62518-

Tarmageddon CVE-2025-62518 视频：https://youtu.be/EYBB4BHsp9E 仓库目录 vulnerable-extract 最小可重现示例，接受一个路径作为参数，并将该文件解压到 ./output malicious-payload 创建一个简单的 malicious.tar 归档，其中包含一些走私内容的示例，注释逐步骤和逐块解释了正在进行的操作 复现 使用提供的 reproduce 脚本 或手动操作 运行 malicious-payload 生成载荷 malicious.tar 将此文件传递给我们的 vulnerable-extract...

CVE-2026-84534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files...

Astra Linux – Vulnerability in libarchive

An improper link resolution flaw during the extraction of an archive can cause changes to the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, triggering this flaw when the victim tries to extract the archive. A local attacker may...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-24330 Wildfly-core: wildfly: arbitrary file read via malicious archive deployment

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-24330

Affected product: wildfly-core. A vulnerability allows a remote attacker, authenticated as a deployer, to import and deploy a malicious archive from an untrusted source by abusing WildFly libraries to craft a Java project and issue an HTTP POST to upload/deploy. This can lead to further exploitat...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

EUVD-2026-55930

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

PT-2026-70055

Name of the Vulnerable Software and Affected Versions wildfly-core affected versions not specified Description A flaw allows a remote attacker with 'deployer' account authentication to import and deploy a malicious archive file from an untrusted source. By leveraging WildFly libraries to create a...

golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A ...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

OESA-2026-3223 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in...

Uncontrolled Resource Consumption

github.com/aquasecurity/trivy is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the custom tar unpacker reading Helm chart archive .tgz entries using io.ReadAll without enforcing a size limit, which allows an attacker to supply a malicious compressed archive that...