EUVD-2014-2027

Malware in sbrugna...

CVE-2018-1002203

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

K64709522: Multiple Zip Slip vulnerabilities

Security Advisory Description CVE-2018-1002200 plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

Arbitrary File Write via Archive Extraction in unzipper

Versions of unzipper before 0.8.13 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames ../../file.txt for example. Recommendation Update to version 0.3.18 or later...

GHSA-884W-698F-927F Arbitrary File Write via Archive Extraction in unzipper

Versions of unzipper before 0.8.13 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames ../../file.txt for example. Recommendation Update to version 0.3.18 or later...

@alminde/geonames-stream (2.2.1), @essex/powerbi-visual-scripts (1.1.0) +35 more potentially affected by CVE-2018-1002203 via unzipper (>=0.3.0, <=0.8.11)

unzipper NPM version =0.3.0, =1.0.0, =1.0.0, =1.1.47, =1.0.0-alpha.53, =0.0.1, =1.1.0, =0.0.41, =1.0.2, =0.0.1, =2.1.0, =2.2.0 and more Source cves: CVE-2018-1002203 Source advisory: OSV:GHSA-884W-698F-927F...

unzipper path traversal vulnerability

The unzipper npm library is a Node.js-based package for cross-platform compression. A path traversal vulnerability exists in unzipper npm library versions prior to 0.8.13. The vulnerability can be exploited to write arbitrary files via specially crafted zip archives with directory traversal names...

CVE-2018-1002203

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002203

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002203

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002203

The unzipper npm library (before 0.8.13) is vulnerable to directory traversal (Zip-Slip) via crafted archive entries with ../, allowing arbitrary file writes during extraction. Root cause: mishandled path normalization in archive extraction. Affected versions are prior to 0.8.13; fix: update to 0...

CVE-2018-1002203: Improper Limitation of a Pathname to a Restricted Directory

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-9624

Name of the Vulnerable Software and Affected Versions: unzipper versions prior to 0.8.13 Description: The issue allows attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction, also known as 'Zip-Slip'. This can occur when a...

Node.js third-party modules: Arbitrary File Write through archive extraction

I would like to report arbitrary file write vulnerability in adm-zip module It allows attackers to write arbitrary files when a malicious archive is extracted. More info here: https://snyk.io/research/zip-slip-vulnerability https://github.com/snyk/zip-slip-vulnerabilityaffected-libraries Module...

Unzipper目录遍历漏洞

Bugtraq ID:66250 CVE ID:CVE-2014-1975 Unzipper是一款基于PHP的在线解压应用。 Unzipper处理文件名存在目录遍历漏洞，允许远程攻击者可创建任意文件或覆盖已存在的文件。 0 Unzipper 1.0.1 用户可联系厂商获得最新的补丁或升级程序： https://play.google.com/store/apps/details?id=org.rhorita777.unzipper...

CVE-2014-1975

CVE-2014-1975 affects Unzipper (Android) by R-Company, version 1.0.1 and earlier. It is a directory traversal vulnerability that allows a remote attacker to overwrite or create arbitrary files via a crafted filename, enabling arbitrary file write in the app’s privileges. Affected: Unzipper 1.0.1 ...

CVE-2014-1975

Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...

CVE-2014-1975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...

PT-2014-4397

Name of the Vulnerable Software and Affected Versions R-Company Unzipper versions 1.0.1 and earlier Description The issue allows remote attackers to overwrite or create arbitrary files via a crafted filename, potentially leading to unauthorized access or data modification. Recommendations For...

Unzipper vulnerable to directory traversal

Overview Unzipper provided by R-Company contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...