Lucene search
+L

52 matches found

NVD
NVD
added 2025/01/25 5:15 a.m.31 views

CVE-2025-0411

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7CVSS0.67071EPSS
SaveExploits8References6
OSV
OSV
added 2025/01/25 5:15 a.m.15 views

CVE-2025-0411

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7CVSS7.1AI score0.67071EPSS
SaveExploits8References6
Cvelist
Cvelist
added 2025/01/25 4:28 a.m.79 views

CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7CVSS0.67071EPSS
SaveExploits8References1
CVE
CVE
added 2025/01/25 4:28 a.m.615 views

CVE-2025-0411

CVE-2025-0411 — 7-Zip MoTW bypass : Multiple connected documents confirm a local-vector vulnerability where double-nested archives fail to propagate the Mark-of-the-Web to extracted files, allowing a crafted archive to execute arbitrary code in the user’s context after interaction (opening/extrac...

7CVSS7.1AI score0.67071EPSS
SaveIn wildExploits8References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/25 4:28 a.m.17 views

CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7CVSS7.1AI score0.67071EPSS
SaveExploits8References1
Debian CVE
Debian CVE
added 2025/01/25 4:28 a.m.33 views

CVE-2025-0411

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7CVSS7.8AI score0.67071EPSS
SaveExploits8
ATTACKERKB
ATTACKERKB
added 2025/01/25 12:00 a.m.98 views

CVE-2025-0411

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7CVSS7AI score0.67071EPSS
SaveIn wildExploits8References2
GithubExploit
GithubExploit
added 2025/01/22 2:40 p.m.725 views

Exploit for Protection Mechanism Failure in 7-Zip

7-Zip Mark-of-the-Web Bypass Vulnerability CVE-2025-0411 - P...

7CVSS8.3AI score0.67071EPSS
SaveExploits8
Positive Technologies
Positive Technologies
added 2024/10/01 12:00 a.m.11 views

PT-2024-10268

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 24.09 Description This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability, as the targ...

7CVSS7.6AI score0.67071EPSS
SaveExploits8References245
Positive Technologies
Positive Technologies
added 2024/09/17 12:00 a.m.9 views

PT-2024-6334 · Winzip · Winzip

Name of the Vulnerable Software and Affected Versions: WinZip versions prior to 29.0 Description: The issue is related to a Mark-of-the-Web Bypass Vulnerability in WinZip, allowing remote attackers to bypass the Mark-of-the-Web protection mechanism. This can be exploited when a user opens a...

7.8CVSS7.7AI score0.00386EPSS
SaveExploits0References27
NCSC
NCSC
added 2022/12/13 12:00 a.m.10 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote co...

8.5CVSS7.7AI score0.76267EPSS
SaveExploits6
OSV
OSV
added 2021/12/16 5:15 a.m.3 views

DEBIAN-CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

7.5CVSS7.3AI score0.01824EPSS
SaveExploits1References1
Rows per page
Query Builder