CVE-2025-63372

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

CVE-2026-25134

Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via exec. This can be combined with uploadi...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the LicensingInfos function, which reads license files specified in the copyright.license-path field without validating that paths remain within the workspace directory. An attacker can access and exfiltrate...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the retrieveWorkspace function. An attacker can overwrite or create files outside the intended workspace directory by supplying a crafted tar stream containing directory traversal sequences. Details A Directory...

CVE-2026-1810 bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal

A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component ZIP File Handler. Performing a manipulation of the argument File results in path traversal...

CVE-2026-1810 bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal

A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component ZIP File Handler. Performing a manipulation of the argument File results in path traversal...

CVE-2026-1810

CVE-2026-1810 affects bolo-blog/bolo-solo up to version 2.6.4 . The vulnerability resides in the ZIP File Handler, specifically the function unpackFilteredZip in src/main/java/org/b3log/solo/bolo/prop/BackupService.java, where manipulating the argument File can cause a path traversal. Exploitatio...

EUVD-2026-5175

A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component ZIP File Handler. Performing a manipulation of the argument File results in path traversal...

CVE-2026-24673

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the...

CVE-2025-63372

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

CVE-2025-63372

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

@anchan828/nest-storage (>=0.1.2, <=1.0.8), @baosight/federation-types (>=0.0.1, <=0.0.3) +98 more potentially affected by CVE-2026-24884 via compressing (>=1.1.0, <=1.10.3)

compressing NPM version =1.1.0, =0.1.2, =0.0.1, =1.3.2, =0.1.2, =0.1.2, =1.0.18, =1.3.28, =1.3.42, =1.2.33, =1.3.19, =1.3.32, =2.3.1, =1.0.0, =1.5.2, =1.5.2, =1.6.1 and more Source cves: CVE-2026-24884 Source advisory: OSV:GHSA-CC8F-XG8V-72M3...

CVE-2026-24673

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the...

CVE-2026-24673 Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the...

CVE-2026-24673

The CVE-2026-24673 entry describes a file upload validation bypass in Open eClass (formerly GUnet eClass) prior to version 4.2. Attackers could embed prohibited extensions inside ZIP archives and rely on the application's decompression to extract them, bypassing file-type checks. This issue has b...

EUVD-2026-5235

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the...

CVE-2026-24673 Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the...

CVE-2025-14914

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution...

PT-2026-6062

Name of the Vulnerable Software and Affected Versions bolo-blog bolo-solo versions prior to 2.6.5 Description A path traversal issue exists in the ZIP File Handler component of bolo-blog bolo-solo. The issue is located in the unpackFilteredZip function within the...

CVE-2025-63372

The Articentgroup Zip Rar Extractor Tool version 1.345.93.0 is vulnerable to a Directory Traversal flaw. This vulnerability exists within the ZIP file processing component , specifically affecting the functionality that handles the extraction and management of ZIP archive contents. This allows fo...