org.apache.activemq:activemq-http (>=6.0.0, <=6.2.3), org.apache.activemq:activemq-karaf (>=6.0.0, <=6.2.3) +4 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:activemq-mqtt (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-mqtt MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2025-66168, CVE-2026-40046 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-15426349...

org.apache.activemq:activemq-http (6.2.0), org.apache.activemq:activemq-karaf (6.2.0) +4 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-mqtt (6.2.0)

org.apache.activemq:activemq-mqtt MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-mqtt and may be impacted: - org.apache.activemq:activemq-http 6.2.0 - org.apache.activemq:activemq-karaf 6.2.0 -...

org.apache.activemq:activemq-http (>=6.0.0, <=6.1.8), org.apache.activemq:activemq-karaf (>=6.0.0, <=6.1.8) +4 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-mqtt (>=6.0.0, <=6.1.8)

org.apache.activemq:activemq-mqtt MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.8 Source cves: CVE-2025-66168 Source advisory: GHSA-C825-6PH3-4H84...

org.apache.activemq:activemq-http (>=6.0.0, <=6.1.8), org.apache.activemq:activemq-karaf (>=6.0.0, <=6.1.8) +4 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-mqtt (>=6.0.0, <=6.1.8)

org.apache.activemq:activemq-mqtt MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.8 Source cves: CVE-2025-66168 Source advisory: OSV:GHSA-C825-6PH3-4H84...

org.apache.activemq:activemq-http (6.2.0), org.apache.activemq:activemq-karaf (6.2.0) +4 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:activemq-mqtt (6.2.0)

org.apache.activemq:activemq-mqtt MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-mqtt and may be impacted: - org.apache.activemq:activemq-http 6.2.0 - org.apache.activemq:activemq-karaf 6.2.0 -...

GHSA-J273-M5QQ-6825 Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix

Summary A backslash path traversal vulnerability in LocalFolderExtractor allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix. This can often lead to remote code execution e.g., overwriting...

Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix

Summary A backslash path traversal vulnerability in LocalFolderExtractor allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix. This can often lead to remote code execution e.g., overwriting...

EUVD-2026-8909

Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix...

com.github.junrar:commons-vfs-rar (1.0.0) potentially affected by CVE-2026-28208 via com.github.junrar:junrar (5.0.0)

com.github.junrar:junrar MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.github.junrar:commons-vfs-rar 1.0.0 Source cves: CVE-2026-28208 Source advisory: OSV:GHSA-J273-M5QQ-6825...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Este repositorio contiene un generador de archiv...

PepRaR

PepRaR Laborator...

CVE-2025-63372

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

CVE-2025-63372: Improper Limitation of a Pathname to a Restricted Directory

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

Articentgroup Zip Rar Extractor Tool has a security vulnerability

The Articentgroup Zip Rar Extractor Tool is a decompression tool developed by the Articentgroup company in the United States. The version 1.345.93.0 of the Articentgroup Zip Rar Extractor Tool contains a security vulnerability, which stems from a directory traversal vulnerability present in the Z...

EulerOS Virtualization 2.10.0 : libarchive (EulerOS-SA-2026-1176)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

SUSE CVE-2026-24857

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor's embedded unrar code has a heap-buffer-overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out-of-bounds write in Unpack::CopyString, leading to a crash under ASAN and...

📄 libarchive RAR Double Free / Use-After-Free

This proof of concept demonstrates a memory management flaw in libarchive versions prior to 3.8.0 when handling malformed RAR headers. By supplying a corrupted RAR structure, the code forces error paths during archive parsing, leading to improper cleanup. As a result, the archive object may be...

EUVD-2026-4855

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...

CVE-2026-24857 bulk_extractor has Heap-based Buffer Overflow vulnerability

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...

CVE-2026-24857: Heap-based Buffer Overflow

bulkextractor is a digital forensics exploitation tool. Starting in version 1.4, bulkextractor’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in Unpack::CopyString, leading to a crash under ASAN and...