14951 matches found
7-Zip numerical error vulnerability
7-Zip is a compression software from the 7-Zip open source. A numeric error vulnerability exists in 7-Zip that stems from improper validation of user-supplied data during the Zstandard decompression process, which could result in an integer overflow and execution of arbitrary code before writing ...
7-Zip < 24.07 RCE (ZDI-24-1532)
The version of 7-Zip installed on the remote host is prior to 24.07. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-24-1532 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interactio...
CVE-2024-11612: Loop with Unreachable Exit Condition
7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on th...
7-Zip security vulnerabilities
7-Zip is a compression software from the 7-Zip open source. A security vulnerability exists in 7-Zip that stems from a logic error when processing streams, which could lead to an infinite loop that creates a denial of service condition...
CVE-2024-11477: Integer Underflow (Wrap or Wraparound)
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...
CVE-2024-51365
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Moderate: Red Hat Security Advisory: RHOSP 17.1.4 (python-zipp) security update
An update for python-zipp is now available for Red Hat OpenStack Platform RHOSP 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp
A flaw was found in jaraco/zipp. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is...
Exploit for Path Traversal in Ollama
CVE-2024-45436 Attack Example Code POC CVE-2024-45436 i...
7-Zip Zstandard Code Execution
The vulnerability of the Zstandard compression method used by the 7-Zip archive manager is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted archive...
PT-2024-8763
Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 24.08 Description The issue is related to a logic error in the processing of streams, which can lead to an infinite loop. This allows remote attackers to create a denial-of-service condition on affected installations of...
PT-2024-34609 · Visicut · Visicut
Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue allows attackers to execute arbitrary code via uploading a crafted Zip file, exploiting an arbitrary file upload vulnerability in the importSettings method. Recommendations: For VisiCut version 2.1,...
7-Zip Qcow Handler Infinite Loop Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processin...
CVE-2024-51365
CVE-2024-51365 entry is rejected/not used; withdrawn by CNA and not a security issue.
U.S. Dept Of Defense: Exposed Extremely Sensitive Information in Public ZIP File
A publicly accessible ZIP file containing sensitive information, including SMTP credentials, database connection details, and AWS secret keys, was discovered. The sensitive data was exposed due to the lack of proper access controls and encryption. The exposed credentials could have been misused f...
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the asset upload functionality. An attacker can place files in unintended locations on the server by uploading files with specially crafted filenames. Details A Directory Traversal attack also known as path...
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path...