CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

CVE-2026-96596

A flaw was found in the Erlang OTP erltar module. An attacker can cause a Denial of Service DoS by supplying a specially crafted TAR archive containing a malformed GNU sparse file. When an application extracts the archive to disk, the extraction process enters an infinite loop, exhausting CPU...

CVE-2024-0406-POC

CVE-2024-0406 Proof of Concept PoC This repository contains a Proof of Concept PoC exploit for CVE-2024-0406 , a vulnerability involving symlink-based tar archive extraction that allows for path traversal or file overwriting in affected systems. More Details at Path Traversal in mholt/archiver...

CVE-2026-79824

A flaw was found in Python. An attacker can exploit this directory traversal vulnerability by providing a specially crafted TAR archive containing relative path sequences, such as dot-dot notation. When the archive is extracted, files can be written outside the intended extraction directory,...

PYSEC-2026-4209 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

CVE-2026-79824

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...

CVE-2026-79824 HPE NonStop Python 3.x - Directory traversal vulnerability

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...

CVE-2026-79824

A directory traversal vulnerability exists in HPE NonStop Python 3.x (specifically version T0993 - T0993L01^AAL and earlier ) caused by a .. (dot dot) sequence in filenames within a TAR archive. This flaw could allow an attacker to overwrite arbitrary files. HPE has released fixes, including vers...

EUVD-2026-101969

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...

CLEANSTART-2026-RB55722 node-tar is a tar archive manipulation library for Node

CVE-2026-59874 affects multiple packages. node-tar is a tar archive manipulation library for Node. See references for individual vulnerability details...

CLEANSTART-2026-FT30855 node-tar is a tar archive manipulation library for Node

CVE-2026-73566 affects multiple packages. node-tar is a tar archive manipulation library for Node. See references for individual vulnerability details...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1792085312)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host...

Linux Distros Unpatched Vulnerability : CVE-2026-96596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar...

Linux Distros Unpatched Vulnerability : CVE-2026-79824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR...

wargame-tarpioka

BubbleTea CVE-2007-4559 Directory traversal vulnerability using .tar to ../../flag path BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Current Building Instructions check docker docker ps docker images docker build -t tarpioka...

CVE-2025-59284-PoC

CVE-2025-59284-PoC Proof of concept for CVE-2025-59284 libarchive exploit usage: Usage: Poc.py e.g python poc.py test.pdf '\IP\Share\test.pdf' pdf.tar Technical writeup: https://sec-fault.com/blog/cve-2025-59284/ Video...

PoC-for-CVE-2020-28948-CVE-2020-28949

POC for CVE-2020-28948 & CVE-2020-28949 The files here contain PoC for CVE-2020-28948 & CVE-2020-28949 to achieve remote exploit The server The server folder contains a simple upload server which uses the vulnerable ArchiveTar library, located in server/Archive. The server accepts a Tar archive...

GHSA-3CR3-8M4C-FPXW Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1781104507)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781104507 advisory. - The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as...

Rocky Linux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.6:CLSA-2026:1781083045)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781083045 advisory. - The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as...