neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

CVE-2025-0851

CVE-2025-0851 This vulnerability occurs in the Deep Java Library an open-source framework for Java deep learning when providing utilities for extracting tar and zip model archives used for loading models. A File Traversal vulnerability arises in the untar and unzip functions. Details: When creati...

cve-2003-0282

This is the README file for the 22 May 2004 public release of the Info-ZIP group's portable UnZip zipfile-extraction program and related utilities. unzip551.zip portable UnZip, version 5.51, source code distribution unzip551.tar.Z same as above, but compress'd tar format unzip551.tar.gz same as...

unzip_poc

POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

CLEANSTART-2026-HJ66405 Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Info-ZIP UnZip 6...

CLEANSTART-2026-ER10170 Buffer overflow in the zi_short function in zipinfo

Security vulnerability affects the unzip package. Buffer overflow in the zishort function in zipinfo...

CLEANSTART-2026-JJ46752 Buffer overflow in the list_files function in list

Security vulnerability affects the unzip package. Buffer overflow in the listfiles function in list...

CLEANSTART-2026-HA67864 unzip 6

Security vulnerability affects the unzip package. unzip 6...

CLEANSTART-2026-UB42257 Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6...

CLEANSTART-2026-PW81515 Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6...

CLEANSTART-2026-RT55512 Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6...

CLEANSTART-2026-QO65180 Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Info-ZIP UnZip 6...

CLEANSTART-2026-BT52726 Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Info-ZIP UnZip 6...

CLEANSTART-2026-IW92986 flaw was found in Unzip

Security vulnerability affects the unzip package. A flaw was found in Unzip...

CLEANSTART-2026-LK03309 flaw was found in unzip

Security vulnerability affects the unzip package. A flaw was found in unzip...

Rocky Linux 9.6 [CIQ] Security Update: unzip Multiple Vulnerabilities (ciqsa-2026_1726)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261726 advisory. This advisory aggregates security fixes for the unzip SRPM in CIQ LTS 9.6. It addresses 11 CVEs: CVE-2022-0529, CVE-2016-9844, CVE-2019-13232,...

CentOS Linux 7.9 [CIQ] Security Update: unzip Multiple Vulnerabilities (ciqsa-2026_1650)

The CentOS Linux 7.9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261650 advisory. This advisory aggregates security fixes for the unzip SRPM in CIQ CentOS Bridge 7.9. It addresses 9 CVEs: CVE-2019-13232, CVE-2018-1000035, CVE-2005-466...

SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWall Secure Mobile Access. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the unzip method. The issue results from the lack of...

CVE-2026-110639 @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir

@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract can inject commands into unquoted shelljs exec strings ...