252 matches found
winrar-cve-2023-38831-poc-gen
CVE-2023-38831 Exploit Generator This tool is a Python script that exploits a vulnerability in the RAR file format CVE-2023-38831 to execute a malicious command when a user opens a bait file. The exploit works on WinRAR versions before 6.23. For Example 6.22, 6.21, 6.20 or above. Requirements...
Zimbra-CVE-2022-30333
Zimbra-CVE-2022-30333 Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC. CVE-2022-30333 Zimbra UNRAR vulnerability. Unrar till V 6.11 vulnerable. Make sure your .jsp shell is undetected. This exploit will work on zimbra installed on default path. Place...
WinRAR-CVE-2023-38831
WinRAR-CVE-2023-38831 This Metasploit module exploits a vulnerability in WinRAR 6.22 CVE-2023-38831. When a user opens a crafted RAR file and its embedded document, the decoy document is executed, leading to code execution. It is not pretty, but works. 🤷🏻 Alexander Hagenah @xaitax References...
Cve-2025-8088-WinRar-vulnerability
Cve-2025-8088 WinRAR Herramienta en Python que crea un archivo RAR malicioso para explotar la vulnerabilidad CVE-2025-8088 en WinRAR. La vulnerabilidad CVE-2025-8088 permite la explotación de archivos RAR manipulados para provocar path traversal y sobrescribir archivos arbitrarios en el sistema d...
Detect-CVE-2018-20250
Detect-CVE-2018-20250 This script detects whether a .rar file may have the configuration to exploit CVE-2018-20250. For this detection, the file command and the strings command, which are available in most Linux distributions, are used. Usage ./detectwinrarexploit.sh Payload extraction To extract...
CVE-2025-8088-WinRAR-PathTraversal-PoC
CVE-2025-8088 WinRAR Path Traversal Exploit PoC A Proof-of-Concept exploit demonstrating the WinRAR path traversal vulnerability CVE-2025-8088 affecting versions ≤ 7.12. Vulnerability Details CVE ID : CVE-2025-8088 CVSS Score : 8.4 High Affected Versions : WinRAR ≤ 7.12 Patch Version : Fixed in...
WinRar_ACE_exploit_CVE-2018-20250
WinRar ACE Exploit CVE-2018-20250 Dieses Programm ist ein in Python entwickeltes Skript, das die ACE-Sicherheitslücke in WinRar ausnutzt - Schwachstelle CVE-2018-20250 Es basiert auf einem früheren Projekt von WyAtu Es wird für Bildungszwecke auf dem Blog von Daniel Vispo verwendet Wie generiert...
zeek-gozi-detector
Gozi Malware Detector Dieses Zeek-Paket erkennt Gozi-Banking-Malware-Aktivitäten. Ressourcen: Die RAR-Dateien, nach denen dieses Paket sucht, wurden in den folgenden Artikeln behandelt: https://unit42.paloaltonetworks.com/march-wireshark-gozi-answers/...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control through a crafted RAR file. Chromium security severity: Medium...
SUSE CVE-2026-11210
Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...
EUVD-2026-34671
Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...
CVE-2026-11210
Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...
CVE-2026-11210
Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...
CVE-2026-11210
Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...
CVE-2026-11210
Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from improper implementation of the secure browsing feature, which could allow remote attackers to bypass autonomous access contr...
EUVD-2026-19132
A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public...
CVE-2026-5601 Acrel Electrical Prepaid Cloud Platform Backup File bin.rar information disclosure
A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of the file /bin.rar of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public...
