CVE-2025-6218-POC

RARLAB WinRAR 目录遍历远程代码执行漏洞。该漏洞允许远程攻击者在受影响的 RARLAB WinRAR 安装上执行任意代码。利用该漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于对压缩包内文件路径的处理中。构造的文件路径可能导致进程遍历到非预期目录。攻击者可利用此漏洞在当前用户上下文中执行代码。ZDI 编号为 ZDI-CAN-27198。 📦 多路径遍历 ZIP 载荷生成器 此 Python 脚本会创建一个特制的 ZIP 压缩包，利用 WinRAR 目录遍历远程代码执行 漏洞（ZDI-CAN-27198）。该压缩包中包含一个旨在被解压到 Windows ...

CVE-2019-11043-Vulnerability

协作者：Olaf Madejski、Andrew Masone、Nate Desany PHP-FPM 反向隧道利用与持久化演示 CVE-2019-11043 — Debian PHP-FPM 路径处理漏洞 项目概述 2019 年 10 月，Debian 安全公告团队的研究人员 Emil Lerner 和 Andrew Danau 发布公告，警告 Debian 社区 PHP-FPM 中存在一个严重漏洞。由于 PHP-FPM 的路径处理代码验证不足 ，攻击者可以操纵特制请求，在某些 NGINX + PHP-FPM 配置下实现远程任意代码执行 。 本实验演示了以下漏洞的利用：...

CVE-2025-43537

CVE-2025-43537 Apple 安全致谢 研究人员： Al Sadman Awal 已获得 Apple 产品安全团队对 CVE-2025-43537 负责任披露的正式致谢。 概述 CVE-2025-43537 是一项在独立安全研究中发现并负责任地向 Apple 披露的安全漏洞。 Apple 调查了该报告，实施了安全修复，分配了 CVE-2025-43537，并在其官方安全公告中公开致谢该贡献。 本仓库记录了与该漏洞相关的公开披露、厂商致谢和公告信息。 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2025-43537 厂商| Apple 研究人员| Al...

CVE-2026-84534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2026-65411

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

CVE-2026-64790

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges...

CVE-2026-64756

A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-43691

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

EUVD-2026-78126

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2026-84534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2026-84534

CVE-2026-84534 is a path handling issue in Apple's archive extraction functionality, where insufficient validation allowed a maliciously crafted archive to enable writing arbitrary files. The vulnerability requires local access and user interaction (extracting the archive), with high integrity im...

CVE-2026-64756

A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

EUVD-2026-78119

A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-64756

CVE-2026-64756 is a path handling vulnerability in Apple's iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 , addressed through improved validation . An app may be able to access user-sensitive data , resulting in a high confidentiality impact with no integrity or...

EUVD-2026-77939

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-43691

CVE-2026-43691 is a path handling issue in macOS that allows an app to potentially gain root privileges through insufficient path validation. The vulnerability is rated CVSS 7.8 (High) with a local attack vector, low complexity, low privileges required, no user interaction, and full impact on con...

CVE-2026-43691

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-64790

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges...

EUVD-2026-78004

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges...

CVE-2026-64790

CVE-2026-64790 is a path handling vulnerability in macOS , addressed with improved validation. An application may be able to gain elevated privileges (local attack vector, user interaction required, no privileges required). The issue is rated CVSS 7.8 (High) with high impact to confidentiality, i...