Lucene search
+L

162 matches found

Kitploit
Kitploit
added 2026/09/20 10:36 a.m.13 views

CVE-2007-4559

PoC o Exploit para CVE-2007-4559 Un archivo TAR malicioso puede incluir rutas de archivo como ../../../../etc/passwd, que intentan "subir" fuera de la carpeta de extracción prevista. Si un script de Python utiliza tarfile.extract o extractall sin verificar las rutas de los archivos, desempaquetar...

9.8CVSS7AI score0.27095EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/18 1:28 a.m.7 views

CVE-2025-4517-POC-Sudoers

CVE-2025-4517 - POC agregando usuario a sudoers Este script es una versión armada de la investigación publicada en el Aviso de Investigación de Seguridad de Google: https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f Mientras que la investigación original demuestra...

9.4CVSS6.8AI score0.0143EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/17 10:49 p.m.8 views

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" Bypass PoC Vulnerabilidad de Path Traversal en el módulo tarfile de Python que afecta a las versiones 3.8.0 hasta 3.13.1. El sandbox filter="data" — diseñado para evitar extracciones no seguras — puede ser evadido creando rutas que exceden PATHMAX 4096...

9.4CVSS7.1AI score0.0143EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/17 7:23 p.m.12 views

CVE-2025-4138-poc

CVE-2025-4138 Generador Auto-Sudo Un script de Python para generar un archivo tar malicioso que explota CVE-2025-4138 / CVE-2025-4517 Recorrido de rutas mediante truncamiento de PATHMAX. Explotar con éxito esta vulnerabilidad permite a un atacante eludir los filtros de extracción de tarfile y...

7.5CVSS7.3AI score0.01385EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/17 4:26 a.m.8 views

CVE-2025-4517-poc

CVE-2025-4517 PoC – Escritura Arbitraria de Archivos en Python tarfile mediante Recorrido de Rutas CVE-2025-4517 CVSS 9.4 – Crítico Una vulnerabilidad en el módulo tarfile de Python que permite escritura arbitraria de archivos fuera del directorio de extracción al usar TarFile.extractall o...

9.4CVSS7.2AI score0.0143EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/16 8:49 p.m.11 views

CVE-2007-4559-lab

CVE-2007-4559 — TarSlip: El Ataque de Recorrido de Directorios de 15 Años Solo con fines educativos. Este laboratorio explota intencionalmente vulnerabilidades del sistema de archivos dentro de contenedores Docker aislados. No lo ejecute en ningún sistema con datos sensibles o en entornos de...

9.8CVSS7AI score0.27095EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/15 10:10 a.m.9 views

CVE-2025-4138_tarfile_filter_bypass

CVE-2025-4138 — Python tarfile filter="data" Bypass Arbitrary file write outside the extraction directory via PATHMAX symlink chain. Affected Versions Python 3.12.0 – 3.12.10 Python 3.13.0 – 3.13.3 Fixed in 3.12.11 / 3.13.4 Credit: Reporter: Caleb Brown Google How It Works Python's tarfile data...

7.5CVSS7AI score0.01385EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/15 5:49 a.m.10 views

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Python tarfile Omisión del Filtro de Datos mediante Desbordamiento de PATHMAX Autor: 0xDTC CVEs: CVE-2025-4517 / CVE-2025-4330 Aviso: GHSA-6r6c-684h-9j7p Corrección de CPython: PR 135037 Descripción general El método tarfile.extractallfilter="data" de Python está...

9.4CVSS7AI score0.0143EPSS
SaveExploits11References3
Kitploit
Kitploit
added 2026/09/14 7:10 p.m.10 views

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Python tarfile Filter Bypass via PATHMAX Symlink Escape Arbitrary file write throughfilter="data" / filter="tar" extraction Table of Contents Overview Vulnerability Details How It Works Affected Versio...

9.4CVSS7.2AI score0.0143EPSS
SaveExploits14References7
Kitploit
Kitploit
added 2026/09/14 6:40 p.m.14 views

CVE-2025-4517-POC

Exploit CVE-2025-4517 NOTAS Este exploit y su descripción están escritos por IA. Si encuentras un error o problema, ¡por favor házmelo saber! Este exploit fue probado y confirmado que funciona. ¡Gracias! Resumen Este exploit aprovecha CVE-2025-4517 , una vulnerabilidad crítica en el módulo tarfil...

9.4CVSS7.1AI score0.0143EPSS
SaveExploits11References4
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.9 views

Astra Linux – Vulnerability in Python 2.7, Pypy

In Lib/tarfile.py in Python 3.8.3, an attacker can create a TAR archive that causes an infinite loop when opened using tarfile.open, due to the lack of header validation in procpax...

7.5CVSS7.1AI score0.06253EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/14 10:30 a.m.9 views

CVE-2026-87910

A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly...

5.7CVSS5.8AI score0.00423EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 9:38 a.m.11 views

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 es una vulnerabilidad en el módulo tarfile de Python que permite escrituras arbitrarias de archivos fuera del directorio de extracción al extraer archivos tar no confiables. El problema ocurre al usar TarFile.extract o TarFile.extractall con filter="data" o...

9.4CVSS7.1AI score0.0143EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 10:27 p.m.11 views

CVE-2025-4138

CVE-2025-4138 Python Tarfile module Directory Traversal Vulnerability With overflow crossed Directory Impact : Privilege escalation Working : Python's TarFile.extractall and TarFile.extract methods support a feature that allows a filter to be set to improve the safety of using these methods...

7.5CVSS7.2AI score0.01385EPSS
SaveExploits7References1
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-87910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is...

5.7CVSS5.8AI score0.00423EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 5:27 p.m.68 views

CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

5.7CVSS0.00423EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/08 9:00 a.m.7 views

CVE-2026-19672

A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...

6.3CVSS5.7AI score0.00409EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/25 12:57 p.m.9 views

BIT-PYTHON-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

6.3CVSS5.4AI score0.00409EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/25 12:57 p.m.17 views

BIT-PYTHON-MIN-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

6.3CVSS5.4AI score0.00409EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

There is a defect in the CPython “tarfile” module that affects the “TarFile” extraction and entry enumeration APIs. The tar implementation processes tar archives with negative offsets without errors, which can lead to an infinite loop and deadlock during the parsing of maliciously crafted tar...

7.5CVSS6.8AI score0.00641EPSS
SaveExploits0References2
Rows per page
Query Builder