17 matches found
CVE-2024-55504
CVE-2024-55504 An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS Reproduce From Terminal...
PT-2026-83253
Name of the Vulnerable Software and Affected Versions aqua versions prior to 2.60.1 Description In the handler.HandleFile function within pkg/unarchive/archives.go, the software fails to verify that the target of a symlink created via os.Symlink remains within the intended extraction destination....
Exploit for NULL Pointer Dereference in Pgbouncer
--- CVE-2026-6666 – XPC Service NSKeyedUnarchiver Deserializ...
GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection
The JavaScript aka JScript malware loader called GootLoader has been observed using a malformed ZIP archive that's designed to sidestep detection efforts by concatenating anywhere from 500 to 1,000 archives. "The actor creates a malformed archive as an anti-analysis technique," Expel security...
EUVD-2023-50497
Malicious code in bioql PyPI...
CVE-2023-46270
MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items...
MacPaw Way The Unarchiver 安全漏洞
MacPaw Way The Unarchiver is a free decompression software from MacPaw Way that supports many common and older compression formats. A security vulnerability exists in MacPaw Way The Unarchiver version 6.4.0, which originated from a vulnerability that allows an attacker to inject arbitrary code vi...
CVE-2024-55504: Improper Control of Generation of Code
An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS...
CVE-2023-46270
MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items...
MacPaw 安全漏洞
MacPaw is a Mac-specific decompression application from MacPaw, Inc. A security vulnerability exists in MacPaw versions prior to 4.3.6, which stems from a vulnerability in Unarchiver that contains a vulnerability related to the lack of an isolation attribute for extracted items...
CVE-2023-46270
MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items...
CVE-2023-46270
MacPaw The Unarchiver versions prior to 4.3.6 are susceptible to a vulnerability involving missing quarantine attributes (or isolation attributes) for extracted items. This flaw stems from incorrect default permissions , potentially allowing extracted files to bypass standard security inspection ...
CVE-2023-46270: Incorrect Default Permissions
MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items...
CVE-2023-46270
MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items...
PT-2023-25975 · Unknown +1 · Plexis Archiver +1
Name of the Vulnerable Software and Affected Versions: Plexis Archiver versions prior to 4.8.0 Description: The issue arises when using AbstractUnArchiver for extracting an archive, potentially leading to arbitrary file creation and possibly remote code execution. This occurs when an archive entr...
The Unarchiver 3.11.1 - '.tar.Z' Crash (PoC)
Exploit Title: The Unarchiver 3.11.1 '.tar.Z' Local Crash PoC Date: 10-17-2016 Exploit Author: Antonio Z. Vendor Homepage: http://unarchiver.c3.cx/unarchiver Software Link: http://unarchiver.c3.cx/downloads/TheUnarchiver3.11.1.zip Version: 3.11.1 Tested on: OS X 10.10, OS X 10.11, OS X 10.12 More...
The Unarchiver 3.11.1 - .tar.Z Crash (PoC)
The Unarchiver 3.11.1 - .tar.Z Crash PoC Exploit Title: The Unarchiver 3.11.1 '.tar.Z' Local Crash PoC Date: 10-17-2016 Exploit Author: Antonio Z. Vendor Homepage: http://unarchiver.c3.cx/unarchiver Software Link: http://unarchiver.c3.cx/downloads/TheUnarchiver3.11.1.zip Version: 3.11.1 Tested on...