Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Este repositorio contiene un generador de archiv...

PepRaR

PepRaR Laborator...

CVE-2025-63372

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

Articentgroup Zip Rar Extractor Tool 安全漏洞

The Articentgroup Zip Rar Extractor Tool is a decompression tool developed by the Articentgroup company in the United States. The version 1.345.93.0 of the Articentgroup Zip Rar Extractor Tool contains a security vulnerability, which stems from a directory traversal vulnerability present in the Z...

EulerOS Virtualization 2.10.0 : libarchive (EulerOS-SA-2026-1176)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

SUSE CVE-2026-24857

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor's embedded unrar code has a heap-buffer-overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out-of-bounds write in Unpack::CopyString, leading to a crash under ASAN and...

📄 libarchive RAR Double Free / Use-After-Free

This proof of concept demonstrates a memory management flaw in libarchive versions prior to 3.8.0 when handling malformed RAR headers. By supplying a corrupted RAR structure, the code forces error paths during archive parsing, leading to improper cleanup. As a result, the archive object may be...

EUVD-2026-4855

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...

CVE-2026-24857 bulk_extractor has Heap-based Buffer Overflow vulnerability

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...

MiracleLinux 7 : libarchive-3.1.2-12.el7 (AXSA:2019-4084:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4084:01 advisory. libarchive: Double free in RAR decoder resulting in a denial of service CVE-2018-1000877 libarchive: Use after free in RAR decoder resulting in a...

Astra Linux – Vulnerability in p7zip-rar

7-Zip is a file archiver with a high compression ratio. Writing zeros outside of the heap buffer in the RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to version 25.0.0. Version 25.0.0 includes a fix for this issue...

MiracleLinux 7 : libarchive-3.1.2-14.0.1.el7.AXS7 (AXSA:2025-10515:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10515:01 advisory. CVE-2025-5914: fix double free with over 4 billion nodes CVEs: CVE-2025-5914 A vulnerability has been identified in the libarchive library, specifically...

MiracleLinux 8 : libarchive-3.3.3-6.el8_10 (AXSA:2025-10771:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10771:04 advisory. libarchive: Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c CVE-2025-5914 Tenable has extracted the preceding description block...

CVE-2020-10193

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android...

CVE-2019-12739

lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution via shell metacharacters in a RAR filename via ajax/extractRar.php nameOfFile and directory parameters...

PT-2026-26289

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A heap out-of-bounds read issue exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. An...

PT-2026-25310

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw exists in the RAR5 archive decompression logic within the archive read data processing path of the libarchive library. Processing a specially crafted RAR5 archive can cause the...

EulerOS Virtualization 2.13.1 : libarchive (EulerOS-SA-2025-2548)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdta...

RHEL 9 : libarchive (RHSA-2025:15024)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15024 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM...

EUVD-2025-201506

A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the component com.rarlab.rar. Such manipulation leads to path traversal. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is...