CVE-2026-6103

A flaw was found in PHP. An integer overflow vulnerability in the Phar extension occurs when parsing TAR archive headers containing excessively large size fields. An attacker can exploit this issue by supplying a specially crafted archive file to an application that processes TAR archives, causin...

CVE-2024-0406-POC

CVE-2024-0406 Proof of Concept（PoC） このリポジトリには、CVE-2024-0406 の Proof of Concept（PoC）エクスプロイトが含まれています。これは、シンボリックリンクベースの tar アーカイブ展開に関連する脆弱性であり、影響を受けるシステム上でパストラバーサルやファイルの上書きを可能にします。 詳細は Path Traversal in mholt/archiver を参照してください。 脆弱性の詳細 CVE ID: CVE-2024-0406 説明: tar...

wargame-tarpioka

BubbleTea CVE-2007-4559 「.tar」を使用したディレクトリトラバーサル脆弱性により../../flag path root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py 現在のビルド手順 dockerの確認 docker ps docker images docker build -t tarpioka docker run -d -it --name...

CVE-2026-79306: Undefined Security Weakness

CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...

EUVD-2026-85402

CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...

CVE-2026-79306

CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property...

CVE-2025-59284-PoC

CVE-2025-59284 の PoC CVE-2025-59284 libarchive エクスプロイトの概念実証 使用方法： root@kitploit: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar 技術解説： https://sec-fault.com/blog/cve-2025-59284/ 動画...

AlmaLinux 10 : libarchive (ALSA-2026:69553)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69553 advisory. libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header CVE-2026-15028 libarchive: libarchive: Signed Integer...

ALSA-2026:69553 Low: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

SUSE SLED15 / SLES15 Security Update : cpio (SUSE-SU-2026:4012-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4012-1 advisory. - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of...

PoC-for-CVE-2020-28948-CVE-2020-28949

CVE-2020-28948 与 CVE-2020-28949 的 PoC 此处的文件包含可实现远程利用的 CVE-2020-28948 与 CVE-2020-28949 的 PoC 服务端 server 文件夹包含一个简单的上传服务端，它使用了存在漏洞的 ArchiveTar 库，该库位于 server/Archive 中。服务端接收用户上传的 Tar 归档文件，将其解压并存放到 server/uploads/ 文件夹中。 使用存在漏洞的库启动服务端： root@kitploit: cd server make build make start 使用已修复的库启动服务端：...

CVE-2026-44402

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 における認証不要の完全リモートコマンド実行 内容 影響を受けるベンダー: https://voltronicpower.com/ 影響を受ける製品: SNMP Web pro 1.1 SNMP Web Pro 1.1 には、upload.cgi エンドポイントに認証なしのリモートコード実行の脆弱性があります。ファームウェア更新機能はユーザーに tar...

EUVD-2025-210915

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103086 CVE-2025-11395 affecting package podman 5.6.1-10

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103272 CVE-2025-11395 affecting package skopeo 1.14.4-13

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103068 CVE-2025-11395 affecting package buildah 1.43.1-3

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

DEBIAN-CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103224 CVE-2025-11395 affecting package libcontainers-common 20240213-3

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103079 CVE-2025-11395 affecting package cri-o 1.30.1-1

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...