CVE-2026-24857

CVE-2026-24857 affects bulk_extractor (bulk extractor). Starting in version 1.4, the embedded unrar code has a heap-buffer-overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image can trigger an out-of-bounds write in Unpack::CopyString, causing a crash under ASAN and likely me...

Building bulk_extractor security vulnerabilities

Building bulkextractor is a high-performance digital forensics analysis tool developed by Simson L. Garfinkel. Versions of Building bulkextractor 1.4 and later contain security vulnerabilities. These vulnerabilities stem from an overflow in the heap buffer in the embedded unrar code’s RAR PPM LZ...

PT-2026-5229

Name of the Vulnerable Software and Affected Versions bulk extractor versions 1.4 and later Description bulk extractor is a digital forensics exploitation tool. The embedded unrar code within bulk extractor, starting with version 1.4, contains a heap-buffer-overflow in the RAR PPM LZ decoding pat...

CVE-2017-12938

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

EUVD-2017-5633

Malware in sbrugna...

EUVD-2017-11021

Malware in sbrugna...

EUVD-2012-6548

Malware in sbrugna...

EUVD-2017-5632

Malware in sbrugna...

EUVD-2017-4465

Malware in sbrugna...

EUVD-2018-13799

Malware in sbrugna...

EUVD-2017-5634

Malware in sbrugna...

EUVD-2017-4462

Malware in sbrugna...

EUVD-2022-51275

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-11189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service NULL pointer dereference and application crash, which could be relevant...

Linux Distros Unpatched Vulnerability : CVE-2017-12938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit !PoCht...

Linux Distros Unpatched Vulnerability : CVE-2017-20006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile. CVE-2017-20006...

Linux Distros Unpatched Vulnerability : CVE-2017-12940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. CVE-2017-12940 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2022-30333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract aka unpack operation, as demonstrated by creating a...

Linux Distros Unpatched Vulnerability : CVE-2022-48579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains. CVE-2022-48579 Note that Nessus relies on the presence of th...