Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Este repositorio contiene un generador de archiv...

Denial Of Service (DoS)

github.com/nwaples/rardecode is vulnerable to a Denial-of-Service DoS. The vulnerability is due to the failure to enforce limits on RAR dictionary sizes, which allows an attacker to supply a specially crafted RAR file that forces excessive memory allocation and triggers an out-of-memory crash...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the maxDictSize parameter when processing large RAR files. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted RAR archive that triggers...

DEBIAN-CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

EUVD-2019-4287

Malware in sbrugna...

EUVD-2005-3217

Malware in sbrugna...

EUVD-2005-3213

Malware in sbrugna...

EUVD-2005-3223

Malware in sbrugna...

EUVD-2006-0345

Malware in sbrugna...

EUVD-2005-3222

Malware in sbrugna...

EUVD-2005-3211

Malware in sbrugna...

EUVD-2018-0513

Malware in sbrugna...

EUVD-2008-1837

Malware in sbrugna...

EUVD-2005-3234

Malware in sbrugna...

EUVD-2006-1327

Malware in sbrugna...

EUVD-2008-0318

Malware in sbrugna...

EUVD-2008-7103

Malware in sbrugna...

EUVD-2025-7004

Malicious code in bioql PyPI...

CVE-2024-12390 Remote Code Execution in binary-husky/gpt_academic

A vulnerability in binary-husky/gptacademic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python rarfile module, which supports symlinks, can be exploited to perform arbitrary file writes. Th...