1450 matches found
CVE-2024-53992
CVE-2024-53992 affects unzip-bot, a Telegram bot that extracts archives. The vulnerability arises from unsanitized inputs (archive name, password, or video name) that can be crafted to trigger command execution via subprocess.Popen with shell=True. Documented impact includes potential remote code...
CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload
unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive name, password, or video name. This...
CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload
unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive name, password, or video name. This...
unzip-bot 操作系统命令注入漏洞
unzip-bot is a Telegram bot used by EDM115 to extract various types of archives. An operating system command injection vulnerability exists in versions prior to unzip-bot 7.0.3a, which stems from improper input cleanup and allows a user to inject malicious commands via constructed zip file names,...
PT-2024-36004 · Unzip-Bot · Unzip-Bot
Name of the Vulnerable Software and Affected Versions: unzip-bot versions prior to 7.0.3a Description: The issue allows users to exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this using a crafted archive...
CBL Mariner 2.0 Security Update: unzip (CVE-2022-0530)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0530 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string...
CBL Mariner 2.0 Security Update: unzip (CVE-2022-0529)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0529 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string...
CVE-2022-0530 affecting package unzip for versions less than 6.0-21
CVE-2022-0530 affecting package unzip for versions less than 6.0-21. A patched version of the package is available...
CVE-2022-0529 affecting package unzip for versions less than 6.0-21
CVE-2022-0529 affecting package unzip for versions less than 6.0-21. A patched version of the package is available...
CVE-2022-0529 affecting package unzip for versions less than 6.0-21
CVE-2022-0529 affecting package unzip for versions less than 6.0-21. A patched version of the package is available...
CVE-2022-0530 affecting package unzip for versions less than 6.0-21
CVE-2022-0530 affecting package unzip for versions less than 6.0-21. A patched version of the package is available...
Allegra 路径遍历漏洞
Allegra is a project management software for mid-sized organizations from Allegra. Allegra suffers from a path traversal vulnerability that stems from the unzipFile feature containing a directory traversal remote code execution vulnerability...
OESA-2024-2422 sbt security update
sbt is the simple build tool for Scala and Java projects. Security Fixes: sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, IO.unzip allows writing of arbitrary file. This would have potential to overwrite /root/.ssh/authorizedkeys. Within sbt's main code...
Ubuntu: Security Advisory (USN-7054-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7054-1 unzip vulnerability
It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of service, or possibly execute arbitrary co...
USN-7054-1: unzip vulnerability
It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of service, or possibly execute arbitrary co...
Ubuntu 24.04 LTS : unzip vulnerability (USN-7054-1)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7054-1 advisory. It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file...
PT-2024-31904 · Unknown · Scriptcase
Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue is a Remote Code Execution RCE vulnerability via the nm unzip function. This allows for remote code execution, potentially leading to unauthorized access and control of the syste...