666 matches found
Trojanizer - Trojanize Your Payload (WinRAR [SFX] Automatization)
The Trojanizer tool uses WinRAR SFX to compress the two files input by user, and transforms it into an SFX executable.exe archive. The sfx archive when executed it will run both files our payload and the legit appl at the same time. To make the archive less suspicious to target at execution time,...
winrar-s.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-485332 Description| Value ---|--- Affected Website:| winrar-s.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...
winrar-cgn.cleverbridge.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-485217 Description| Value ---|--- Affected Website:| winrar-cgn.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
StrongPity APT Covets Secrets of Crypto Users
APT groups covet secrets, and one in particular has chosen to target users intent on protecting theirs. The group is known as StrongPity, and it’s been a characteristic APT outfit using its share of zero days and modular attack tools to infiltrate victims and conduct espionage. This summer,...
WinRAR History
Nessus was able to gather evidence of compressed files that were opened by WinRAR. Note that only compressed files that were opened and not extracted through the explorer shortcut or command line interface were reported. C Tenable Network Security, Inc. include"compat.inc"; if...
WinRAR Elevation of Privilege Vulnerability
WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An elevation of privilege vulnerability exists in WinRAR. Due to the executable installer, specifying "requireAdministrator" ...
WinRAR Remote Code Execution Vulnerability
WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. A remote code execution vulnerability exists in WinRAR. An attacker can exploit this vulnerability to execute arbitrary code...
Design/Logic Flaw
The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...
CVE-2015-5663
The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...
CVE-2015-5663
CVE-2015-5663 affects WinRAR prior to 5.30 beta 5. The issue is in file-execution/registry-handling: when a user opens a file without an extension, WinRAR may execute a similarly named file with an extension in the same folder or load a registry setting file, enabling local privilege escalation. ...
CVE-2015-5663
The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...
WinRAR Arbitrary Code Execution Vulnerability
WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An arbitrary code execution vulnerability exists in WinRAR. The vulnerability can be exploited to execute arbitrary code with...
KLA10729 Privilege escalation vulnerability in WinRAR
Improper files handling was found in WinRAR. By exploiting this vulnerability malicious users can execute arbitrary code with WinRAR privileges. This vulnerability can be exploited remotely via a specially designed archive. Technical details This vulnerability related to two WinRAR functions:one...
JVN#64636058: WinRAR may insecurely load executable files
WinRAR contains a function where user specified files on the local disk can be executed. When this file does not have a file extension, a file of the same name with a file extension contained in the same folder may be executed by WinRAR instead of the user specified file. WinRAR also contains a...
Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps CmdExtract::ExtractCurrentFile should sanity check Arc.FileHead.UnpSize earl...
Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption
Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps...
WinRAR SFX 'Text and Icon'函数远程代码执行漏洞
0 0 0 0...
WinRAR SFX 'Text and Icon' Function Remote Code Execution Vulnerability
WinRAR is a suite of compression and decompression software, of which SFX is a component that carries its own decompression program. A remote code execution vulnerability exists in WinRAR SFX. An attacker could use this vulnerability to execute arbitrary code in an affected application, which cou...
Talking about the zip format, the processing logic vulnerability-vulnerability warning-the black bar safety net
Preface: the zip compression format is widely used, various platforms are used, the Windows platform used to compress the file, the Android platform as apk file format. Since the zip file format is more complex, in the parsing of the zip file format, if handled improperly, could lead to some...
WinRAR SFX Remote Code Execution Vulnerability
WinRAR is a very popular compression/decompression tool. A remote code execution security vulnerability exists in WInRAR SFX v5.21, Text and Icon feature of the Text to display in SFX window module. A remote attacker exploiting this vulnerability with a zip archive with a malicious load can...