Lucene search
K

644 matches found

The Hacker News
The Hacker News
added 2 days ago10 views

Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability to deliver multiple malware families aimed at data theft and propagation. Per Sekoia, the activity involves the weaponization of CVE-2025-8088, a path traversal flaw in WinRAR,...

8.8CVSS6.5AI score0.08336EPSS
Exploits34
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux - уязвимость в unrar-nonfree

RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.5AI score0.91887EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в unrar-nonfree

RARLAB WinRAR prior to version 7.00, on Linux and UNIX platforms, allowed attackers to spoof the screen output or cause a denial of service, through ANSI escape sequences...

7.1CVSS6.7AI score0.01394EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/05 9:30 p.m.1 views

EUVD-2019-20089

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.9AI score0.00016EPSS
Exploits1References4
NVD
NVD
added 2026/04/05 9:16 p.m.1 views

CVE-2019-25677

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS0.00016EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.0 views

CVE-2019-25677

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.9AI score0.00016EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.1 views

CVE-2019-25677 WinRAR 5.61 Denial of Service via Malformed Language File

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.9AI score0.00016EPSS
Exploits1References3
CVE
CVE
added 2026/04/05 8:45 p.m.7 views

CVE-2019-25677

WinRAR 5.61 is affected by a local-denial-of-service vulnerability caused by a malformed winrar.lng language file in the installation directory. When a user opens an archive and clicks the Test button, the program may crash due to an access violation at memory address 004F1DB8 while reading inval...

6.9CVSS5.9AI score0.00016EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/04/05 8:45 p.m.18 views

CVE-2019-25677 WinRAR 5.61 Denial of Service via Malformed Language File

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS0.00016EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.0 views

PT-2026-30485

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.9AI score0.00016EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.3 views

WinRAR 安全漏洞

WinRAR is a file compressor developed by the WinRAR company. This product supports compression and decompression of files in formats such as RAR and ZIP. Version 5.61 of WinRAR contained a security vulnerability, which was caused by a denial-of-service attack. This vulnerability could allow local...

6.9CVSS5.8AI score0.00016EPSS
Exploits1References3
GithubExploit
GithubExploit
added 2026/03/25 1:4 p.m.91 views

Exploit for Path Traversal in Rarlab Winrar

POC f...

8.8CVSS7.1AI score0.08336EPSS
Exploits34
HackRead
HackRead
added 2026/03/16 11:2 a.m.3 views

New XWorm 7.1 and Remcos RAT Attacks Abuse Windows Tools to Evade Detection

New XWorm 7.1 and Remcos RAT campaigns abuse trusted Windows tools to evade detection. The attacks exploit a WinRAR flaw and use process hollowing to spy on victims...

5.8AI score
Exploits0
GithubExploit
GithubExploit
added 2026/03/07 10:41 p.m.176 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 CVE-2025-8088 — Educational proof-of-concept for...

8.8CVSS6AI score0.08336EPSS
Exploits34
GithubExploit
GithubExploit
added 2026/02/15 1:59 p.m.119 views

Exploit for Path Traversal in Rarlab Winrar

RedFramework Фреймворк для исследования методов постэксплу...

8.8CVSS7.5AI score0.08336EPSS
Exploits34
GithubExploit
GithubExploit
added 2026/02/14 2:10 a.m.129 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Explotación WinRAR Herramienta avanzada de...

8.8CVSS7.4AI score0.08336EPSS
Exploits34
GithubExploit
GithubExploit
added 2026/02/11 12:29 a.m.121 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 Este repositorio contiene un generador de archiv...

8.8CVSS5.4AI score0.08336EPSS
Exploits34
The Hacker News
The Hacker News
added 2026/02/04 2:9 p.m.7 views

China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns

Threat actors affiliated with China have been attributed to a fresh set of cyber espionage campaigns targeting government and law enforcement agencies across Southeast Asia throughout 2025. Check Point Research is tracking the previously undocumented activity cluster under the moniker...

8.8CVSS8.5AI score0.08336EPSS
Exploits34
HackRead
HackRead
added 2026/01/28 3:49 p.m.4 views

Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

The Google Threat Intelligence Group GTIG warns that nation-state actors and financially motivated threat actors are exploiting a…...

5.9AI score
Exploits0
The Hacker News
The Hacker News
added 2026/01/28 9:46 a.m.10 views

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088

Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched critical security flaw in RARLAB WinRAR to establish initial access and deploy a diverse array of payloads. "Discovered and patched in July 202...

8.8CVSS7.7AI score0.08336EPSS
Exploits42
Rows per page
Query Builder